CVEs affecting projects tracked on Release Alert, from NVD & OSV.
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.