There’s not going to be a CVE feed for that since it went out of LTS ~3 years ago.