CVEs affecting projects tracked on Release Alert, from NVD & OSV.
karakeep v0.26.0 to v0.7.0 was discovered to contain a Server-Side Request Forgery (SSRF).