CVEs affecting projects tracked on Release Alert, from NVD & OSV.
api/views/user.py in LibrePhotos before e19e539 has incorrect access control.