CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php.