CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Aprktool before 2.9.3 on Windows allows ../ and /.. directory traversal.