CVEs affecting projects tracked on Release Alert, from NVD & OSV.
PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist