There are 2 open security issues in bullseye.
2 issues left for the package maintainer to handle:
- CVE-2022-0730:
(needs triaging)
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
- CVE-2020-14424:
(needs triaging)
Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme.
You can find information about how to handle these issues in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/c/cacti.png){kind=link}