CVEs affecting projects tracked on Release Alert, from NVD & OSV.
libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.