CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters.