CVEs affecting projects tracked on Release Alert, from NVD & OSV.
gitingest before 9996a06 mishandles symbolic links that point outside of the base directory.