CVEs affecting projects tracked on Release Alert, from NVD & OSV.
In Gitea through 1.17.1, repo cloning can occur in the migration function.