Tinc is potentially affected by CVE-2019-14899.

Please ensure your firewalls block packets with destination IP addresses in your VPN IP range from being received on WAN interfaces.