There is 1 open security issue in bullseye.
1 issue left for the package maintainer to handle:
There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.
You can find information about how to handle this issue in the security team's documentation.