CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Joplin through 1.0.184 allows Arbitrary File Read via XSS.