CVEs affecting projects tracked on Release Alert, from NVD & OSV.
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.