Package: wireguard-dkms Severity: serious The only kernel shipped in bullseye is 5.10, and dkms.conf already inhits building the module for it.
There is not much benefit shipping a package that cannot do anything useful in the release in question. Running the buster kernel at least temporarily is possible, but in that case the user already has to have the package installed for any benefit. For using wireguard in buster today, the buster-backports kernel would anyway the best solution. Overall it feels like a package with high CVE risk and 0 users in bullseye.