There is 1 open security issue in buster.
1 issue left for the package maintainer to handle:
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.
You can find information about how to handle this issue in the security team's documentation.