CVEs affecting projects tracked on Release Alert, from NVD & OSV.
JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack