CVEs affecting projects tracked on Release Alert, from NVD & OSV.
hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE).