Package: libeccodes0 Version: 2.0.0-1 libeccodes0 contains an embedded copy of libgrib-api0. The Debian policy section 4.14 explicitly advises against doing so. Please try to remove the embedded copy. If that is not possible, please get your embedded copy registered with the security tracker[1].
Helmut [1] https://wiki.debian.org/EmbeddedCodeCopies