CVEs affecting projects tracked on Release Alert, from NVD & OSV.
fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.