Found the following significant warnings:
  xgboost_R.cc:70:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:72:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:77:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:78:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:85:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:86:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:94:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:97:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:125:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:129:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:157:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:162:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:190:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:195:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:209:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:215:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:222:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:225:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:239:5: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:245:5: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:248:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:267:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:268:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:288:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:298:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:303:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:311:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:312:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:319:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:320:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:327:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:340:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:343:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:356:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:359:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:365:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:368:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:374:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:377:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:392:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:396:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:416:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:421:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:431:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:441:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:457:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:478:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:486:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:487:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:493:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:494:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:500:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:503:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:513:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:518:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:527:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:530:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:536:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:537:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:546:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:551:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:558:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:561:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:571:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:597:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:607:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:617:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:625:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:627:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:636:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:646:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:666:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  xgboost_R.cc:692:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
See ‘/home/hornik/tmp/R.check/r-devel-clang/Work/PKGS/xgboost.Rcheck/00install.out’ for details.
* used C compiler: ‘Debian clang version 17.0.5 (1)’
* used C++ compiler: ‘Debian clang version 17.0.5 (1)’