1. Current security vulnerabilities
  2. Fixed security vulnerabilities
    1. Other vulnerabilities solved in included applications

Since Tails is based on Debian, it takes advantage of all the work done by the Debian security team. As quoted from https://www.debian.org/security/:

Debian 严肃地看待安全问题， 我们专注地处理任何安全问题 以确保它们能在合理的时间内得到修正。 许多改善建议都会与许多其它自由软件厂商沟通协调， 以便补丁能在漏洞公布的同一时间发布； 我们有安全审计小组来检查存档，以便 找出新的或未修复的安全bug。

Experience has shown that "security through obscurity" does not work. Public disclosure allows for more rapid and better solutions to security problems. In that vein, this page addresses Debian's status with respect to various known security vulnerabilities, which could potentially affect Debian.

Current security vulnerabilities

Fixed security vulnerabilities

Possible remote attack on onion services
Posted
Weak cryptographic parameters in LUKS1
Posted
Serious security vulnerability in Tails 5.0
Posted
JavaScript vulnerability in Tor Browser
Posted
Critical security vulnerability in Tails 3.14.1
Posted
Tor Browser not safe without manual action
Posted
Claws Mail leaks plaintext of encrypted emails to IMAP server
Posted
Security hole in I2P 0.9.13
Posted
You have to upgrade Tor to fix a critical anonymity vulnerability
Posted
Iceweasel exposes a rare User-Agent
Posted

Other vulnerabilities solved in included applications

Known security vulnerabilities in Tails 6.9
Posted
Known security vulnerabilities in Tails 6.8.1
Posted
Known security vulnerabilities in Tails 6.8
Posted
Known security vulnerabilities in Tails 6.7
Posted
Known security vulnerabilities in Tails 6.6
Posted
Known security vulnerabilities in Tails 6.5
Posted
Known security vulnerabilities in Tails 6.4
Posted
Known security vulnerabilities in Tails 6.3
Posted
Known security vulnerabilities in Tails 6.2
Posted
Known security vulnerabilities in Tails 6.1
Posted