CVEs affecting projects tracked on Release Alert, from NVD & OSV.
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.