Known security vulnerabilities (CVE/GHSA) for a specific package version, with fixed versions. Source: OSV.dev.