CiviCRM uses (likely) obsolete package:
Concerns regarding this component were raised in Debian:
.. has not been updated upstream in years (some bugs have
been followed up by a reply, or commit to their VCS two years ago, but
no release happened in four years, not sure it’s still maintained).