CVEs affecting projects tracked on Release Alert, from NVD & OSV.
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression.