CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.