CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Sudo before 1.9.13 does not escape control characters in log messages.