CVEs affecting projects tracked on Release Alert, from NVD & OSV.
GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.