CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Cross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter.