https://security-tracker.debian.org/tracker/status/release/stable
shows the list of packages currently considered vulnerable, but it does not show the severity. For example, https://nvd.nist.gov/vuln/detail/CVE-2021-37973 has a CRITICAL severity but the Debian security tracker simply says "not assigned" (No dev so much as bothered to click on the 'NVD' link?) Merry Christmas! -- Sent with https://mailfence.com Secure and private email