CVEs affecting projects tracked on Release Alert, from NVD & OSV.
The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution.