Source: pcre2 Version: 10.32-3 Tags: patch Please use --disable-pcre2grep-callout in your Debian package. It is surprising to users that a grep tool will execute commands.
This issue was identified during the Ubuntu security review for promotion of pcre2 to main. See https://launchpad.net/bugs/1636666 (comment 47). I am submitting a merge proposal to https://salsa.debian.org/debian/pcre2/merge_requests Thanks, Jeremy Bicha