CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.