CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.