Candidates for DTSAs

The table below lists packages which are fixed in unstable, but unfixed in testing. Use the testing migration checker to find out why they have not entered testing yet.


PackageMigrationBugUrgencyRemote
augeascheckCVE-2025-2588not yet assignedno
busyboxcheckCVE-2026-26157not yet assignedno
CVE-2026-26158not yet assignedno
calibrecheckCVE-2026-25635not yet assignedno
CVE-2026-25636not yet assignedno
CVE-2026-25731not yet assignedno
CVE-2026-26064not yet assignedno
CVE-2026-26065not yet assignedno
CVE-2026-27810not yet assignedno
CVE-2026-27824not yet assignedno
civetwebcheckCVE-2025-9648not yet assignedno
cosigncheckCVE-2026-22703not yet assignedno
edk2checkCVE-2024-38798not yet assignedno
flaskcheckCVE-2026-27205not yet assignedno
freetypecheckCVE-2026-23865not yet assignedno
golang-1.25checkCVE-2026-25679not yet assignedno
CVE-2026-27139not yet assignedno
CVE-2026-27142not yet assignedno
golang-1.26checkCVE-2026-25679not yet assignedno
CVE-2026-27137not yet assignedno
CVE-2026-27138not yet assignedno
CVE-2026-27139not yet assignedno
CVE-2026-27142not yet assignedno
grub2checkCVE-2025-54770not yet assignedno
CVE-2025-54771not yet assignedno
CVE-2025-61661not yet assignedno
CVE-2025-61662not yet assignedno
CVE-2025-61663not yet assignedno
CVE-2025-61664not yet assignedno
linuxcheckCVE-2025-71074not yet assignedno
lxml-html-cleancheckCVE-2026-28348not yet assignedno
CVE-2026-28350not yet assignedno
node-dompurifycheckCVE-2025-15599not yet assignedno
CVE-2026-0540not yet assignedno
node-dottiecheckCVE-2026-27837not yet assignedno
node-immutablecheckCVE-2026-29063not yet assignedno
node-tarcheckCVE-2026-26960not yet assignedno
CVE-2026-29786not yet assignedno
rust-wasmtimecheckCVE-2026-27204not yet assignedno
CVE-2026-27572not yet assignedno
tinyproxycheckCVE-2025-63938not yet assignedno
underscorecheckCVE-2026-27601not yet assignedno
vimcheckCVE-2026-26269not yet assignedno
CVE-2026-28417not yet assignedno
CVE-2026-28418not yet assignedno
CVE-2026-28419not yet assignedno
CVE-2026-28420not yet assignedno
CVE-2026-28421not yet assignedno

Search for package or bug name: Reporting problems