CVEs affecting projects tracked on Release Alert, from NVD & OSV.
In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.