CVEs affecting projects tracked on Release Alert, from NVD & OSV.
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.