There is 1 open security issue in bullseye.
1 issue left for the package maintainer to handle:
An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files.
You can find information about how to handle this issue in the security team's documentation.