CVEs affecting projects tracked on Release Alert, from NVD & OSV.
LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.