There is 1 open security issue in buster.
1 issue left for the package maintainer to handle:
An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
You can find information about how to handle this issue in the security team's documentation.