Sympa before 6.2.56 allows privilege escalation.
https://www.debian.org/security/2020/dsa-4818
https://usn.ubuntu.com/4442-1/
https://sysdream.com/news/lab/2020-05-25-cve-2020-10936-sympa-privileges-escalation-to-root/
https://sysdream.com/news/lab/
https://lists.debian.org/debian-lts-announce/2020/10/msg00012.html