CVEs affecting projects tracked on Release Alert, from NVD & OSV.
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.