Every CVE whose affected-product data names Jsreport Phantom-html-to-pdf, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.