CVEs affecting projects tracked on Release Alert, from NVD & OSV.
A missing nullptr-check in handle_ra_input can cause a nullptr-deref.