The table below lists packages which are fixed in unstable, but unfixed in testing. Use the testing migration checker to find out why they have not entered testing yet.
| Package | Migration | Bug | Urgency | Remote | |
|---|---|---|---|---|---|
| caddy | check | CVE-2026-45135 | not yet assigned | no | |
| CVE-2026-45692 | not yet assigned | no | |||
| CVE-2026-52844 | not yet assigned | no | |||
| CVE-2026-52845 | not yet assigned | no | |||
| CVE-2026-52846 | not yet assigned | no | |||
| chromium | check | CVE-2026-15764 | not yet assigned | no | (fixed in stable?) |
| CVE-2026-15765 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15766 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15767 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15768 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15769 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15770 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15771 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15772 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15773 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15774 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15775 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15776 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15777 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-15778 | not yet assigned | no | (fixed in stable?) | ||
| curl | check | CVE-2026-10536 | not yet assigned | no | |
| CVE-2026-11352 | not yet assigned | no | |||
| CVE-2026-11564 | not yet assigned | no | |||
| CVE-2026-11586 | not yet assigned | no | |||
| CVE-2026-11856 | not yet assigned | no | |||
| CVE-2026-12064 | not yet assigned | no | |||
| CVE-2026-8286 | not yet assigned | no | |||
| CVE-2026-8458 | not yet assigned | no | |||
| CVE-2026-8924 | not yet assigned | no | |||
| CVE-2026-8925 | not yet assigned | no | |||
| CVE-2026-8926 | not yet assigned | no | |||
| CVE-2026-8927 | not yet assigned | no | |||
| CVE-2026-8932 | not yet assigned | no | |||
| CVE-2026-9079 | not yet assigned | no | |||
| CVE-2026-9080 | not yet assigned | no | |||
| CVE-2026-9545 | not yet assigned | no | |||
| CVE-2026-9546 | not yet assigned | no | |||
| cyrus-imapd | check | CVE-2026-47081 | not yet assigned | no | |
| CVE-2026-47082 | not yet assigned | no | |||
| CVE-2026-47083 | not yet assigned | no | |||
| CVE-2026-47084 | not yet assigned | no | |||
| CVE-2026-47085 | not yet assigned | no | |||
| CVE-2026-47086 | not yet assigned | no | |||
| CVE-2026-47087 | not yet assigned | no | |||
| CVE-2026-47088 | not yet assigned | no | |||
| CVE-2026-47089 | not yet assigned | no | |||
| erlang | check | CVE-2026-53422 | not yet assigned | no | |
| CVE-2026-54886 | not yet assigned | no | |||
| CVE-2026-54887 | not yet assigned | no | |||
| CVE-2026-54891 | not yet assigned | no | |||
| CVE-2026-55950 | not yet assigned | no | |||
| CVE-2026-55952 | not yet assigned | no | |||
| flameshot | check | CVE-2026-62294 | not yet assigned | no | |
| freerdp3 | check | CVE-2026-55827 | not yet assigned | no | |
| CVE-2026-57156 | not yet assigned | no | |||
| CVE-2026-57157 | not yet assigned | no | |||
| CVE-2026-57158 | not yet assigned | no | |||
| golang-github-go-git-go-git-v6 | check | CVE-2026-41506 | not yet assigned | no | |
| CVE-2026-45022 | not yet assigned | no | |||
| CVE-2026-45570 | not yet assigned | no | |||
| CVE-2026-45571 | not yet assigned | no | |||
| gopls | check | CVE-2026-42503 | not yet assigned | no | |
| gst-plugins-bad1.0 | check | CVE-2026-12891 | not yet assigned | no | |
| CVE-2026-12892 | not yet assigned | no | |||
| CVE-2026-14935 | not yet assigned | no | |||
| CVE-2026-52720 | not yet assigned | no | |||
| CVE-2026-52722 | not yet assigned | no | |||
| CVE-2026-59691 | not yet assigned | no | |||
| CVE-2026-59692 | not yet assigned | no | |||
| hugo | check | CVE-2026-50133 | not yet assigned | no | |
| CVE-2026-50134 | not yet assigned | no | |||
| CVE-2026-50135 | not yet assigned | no | |||
| jupyter-server | check | CVE-2025-61669 | not yet assigned | no | |
| CVE-2026-35397 | not yet assigned | no | |||
| CVE-2026-40110 | not yet assigned | no | |||
| CVE-2026-40934 | not yet assigned | no | |||
| CVE-2026-44727 | not yet assigned | no | |||
| libdbi-perl | check | CVE-2026-15043 | not yet assigned | no | |
| CVE-2026-15392 | not yet assigned | no | |||
| CVE-2026-60081 | not yet assigned | no | |||
| CVE-2026-60082 | not yet assigned | no | |||
| libheif | check | CVE-2026-32738 | not yet assigned | no | |
| CVE-2026-32739 | not yet assigned | no | |||
| CVE-2026-32740 | not yet assigned | no | |||
| CVE-2026-32741 | not yet assigned | no | |||
| CVE-2026-32814 | not yet assigned | no | |||
| CVE-2026-32882 | not yet assigned | no | |||
| CVE-2026-3950 | not yet assigned | no | |||
| CVE-2026-41069 | not yet assigned | no | |||
| CVE-2026-41071 | not yet assigned | no | |||
| CVE-2026-47178 | not yet assigned | ? | |||
| CVE-2026-47247 | not yet assigned | ? | |||
| CVE-2026-47251 | not yet assigned | ? | |||
| CVE-2026-47254 | not yet assigned | ? | |||
| CVE-2026-47709 | not yet assigned | ? | |||
| CVE-2026-47714 | not yet assigned | ? | |||
| CVE-2026-48029 | not yet assigned | ? | |||
| CVE-2026-49271 | not yet assigned | no | |||
| CVE-2026-50142 | not yet assigned | ? | |||
| libmojolicious-perl | check | CVE-2026-15747 | not yet assigned | no | |
| libnfs | check | CVE-2026-53689 | not yet assigned | no | |
| libxml-bare-perl | check | CVE-2026-13401 | not yet assigned | no | |
| CVE-2026-57074 | not yet assigned | no | |||
| libyaml-syck-perl | check | CVE-2026-13713 | not yet assigned | no | |
| CVE-2026-57075 | not yet assigned | no | |||
| CVE-2026-57076 | not yet assigned | no | |||
| CVE-2026-57077 | not yet assigned | no | |||
| modsecurity | check | CVE-2026-52747 | not yet assigned | no | |
| CVE-2026-52761 | not yet assigned | no | |||
| neatvnc | check | CVE-2026-42859 | not yet assigned | no | |
| nltk | check | CVE-2026-33230 | not yet assigned | no | |
| CVE-2026-33231 | not yet assigned | no | |||
| CVE-2026-33236 | not yet assigned | no | |||
| CVE-2026-54293 | not yet assigned | no | |||
| node-dompurify | check | CVE-2026-49458 | not yet assigned | no | |
| CVE-2026-49459 | not yet assigned | no | |||
| CVE-2026-49978 | not yet assigned | no | |||
| node-tar | check | CVE-2026-53655 | not yet assigned | no | |
| CVE-2026-59871 | not yet assigned | no | |||
| CVE-2026-59873 | not yet assigned | no | |||
| CVE-2026-59874 | not yet assigned | no | |||
| CVE-2026-59875 | not yet assigned | no | |||
| node-ws | check | CVE-2026-62389 | not yet assigned | no | |
| node-xmldom | check | CVE-2026-41672 | not yet assigned | no | |
| CVE-2026-41673 | not yet assigned | no | |||
| CVE-2026-41674 | not yet assigned | no | |||
| CVE-2026-41675 | not yet assigned | no | |||
| openssh | check | CVE-2026-59995 | not yet assigned | no | |
| CVE-2026-59996 | not yet assigned | no | |||
| CVE-2026-59997 | not yet assigned | no | |||
| CVE-2026-59998 | not yet assigned | no | |||
| CVE-2026-59999 | not yet assigned | no | |||
| CVE-2026-60000 | not yet assigned | no | |||
| CVE-2026-60001 | not yet assigned | no | |||
| CVE-2026-60002 | not yet assigned | no | |||
| requests | check | CVE-2026-25645 | not yet assigned | no | |
| sqlite3 | check | CVE-2026-11822 | not yet assigned | no | |
| CVE-2026-11824 | not yet assigned | no | |||
| CVE-2026-50812 | not yet assigned | no | |||
| vim | check | CVE-2026-52858 | not yet assigned | no | |
| CVE-2026-52860 | not yet assigned | no | |||
| CVE-2026-55693 | not yet assigned | no | |||
| CVE-2026-55892 | not yet assigned | no | |||
| CVE-2026-55895 | not yet assigned | no | |||
| CVE-2026-57451 | not yet assigned | no | |||
| CVE-2026-57452 | not yet assigned | no | |||
| CVE-2026-57454 | not yet assigned | no | |||
| CVE-2026-57455 | not yet assigned | no | |||
| CVE-2026-57456 | not yet assigned | no | |||
| CVE-2026-59856 | not yet assigned | no | |||
| CVE-2026-59857 | not yet assigned | no | |||
| CVE-2026-59858 | not yet assigned | no | |||
| xrdp | check | CVE-2026-32105 | not yet assigned | no | |
| CVE-2026-32107 | not yet assigned | no | |||
| CVE-2026-32623 | not yet assigned | no | |||
| CVE-2026-32624 | not yet assigned | no | |||
| CVE-2026-33145 | not yet assigned | no | |||
| CVE-2026-33516 | not yet assigned | no | |||
| CVE-2026-33689 | not yet assigned | no | |||
| CVE-2026-35512 | not yet assigned | no | |||
| CVE-2026-41252 | not yet assigned | ? | |||
| CVE-2026-41521 | not yet assigned | ? | |||
| CVE-2026-42218 | not yet assigned | ? | |||
| CVE-2026-44178 | not yet assigned | ? | |||
| CVE-2026-44978 | not yet assigned | ? | |||
| CVE-2026-54538 | not yet assigned | ? | |||
| CVE-2026-55238 | not yet assigned | ? | |||
| CVE-2026-55626 | not yet assigned | ? | |||
| CVE-2026-55639 | not yet assigned | ? | |||
| CVE-2026-55645 | not yet assigned | ? |