CVEs affecting projects tracked on Release Alert, from NVD & OSV.
hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.