CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.