Vulnerable Open Source Software for a Case Study

Hi,

I'm doing a software compliance project to get acquainted with the security challenges of real (messy) software product. I have to choose an open source project that is still in use with a list of reported vulnerabilities that I can investigate and report on.

Previous projects included:

Hyperledger Sawtooth

Apache Struts 1

Signal Private Messenger

Chromium

Any suggestions of good projects to investigate would be welcome as I'm not sure where to begin. Thanks.

case cybersecurity open source software vulnerable