CVEs affecting projects tracked on Release Alert, from NVD & OSV.
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.