CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function.