lts-no-dsa-needs-review: find no-dsa CVEs that need review
This script finds CVEs fixed in release+1 and release-1, but marked as no-dsa on release. When that's the case that no-dsa is most likely obsolete and may need to be re-triaged.
It's a little LTS-centric right now, but I could make it more LTS agnostic so it works with any release if there is some interest.