There is 1 open security issue in bullseye.
1 issue left for the package maintainer to handle:
- CVE-2022-3433:
(needs triaging)
The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/h/haskell-aeson.png){kind=link}