CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4.