CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Leantime 3.0.6 is vulnerable to HTML Injection via /dashboard/show#/tickets/newTicket.