CVEs affecting projects tracked on Release Alert, from NVD & OSV.
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.