CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Gitea before 1.25.2 mishandles authorization for deletion of releases.