CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component.