CVEs affecting projects tracked on Release Alert, from NVD & OSV.
The URL parameters accepted by forum search were not limited to the allowed parameters.