Looks like there's some help out there already, there's a CVE check in some python2 janky fashion...
https://raw.githubusercontent.com/rossengeorgiev/salt-security-backports/master/salt-cve-check.py
but use your best judgement, its yet another script.
Well. This was pleasing to see in mainstream tech media https://arstechnica.com/gadgets/2020/04/not-actually-linux-distro-review-freebsd-12-1-release/ #freebsd
FreeBSD enthusiast and frequent contributor, CommerceHub Staff Software Engineer.