CVEs affecting projects tracked on Release Alert, from NVD & OSV.
mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.