37 CVEs affecting Invisible-Island products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: Ncurses, Xterm, Lynx, Mawk, Ncurse.