CVEs affecting projects tracked on Release Alert, from NVD & OSV.
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file.