CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.