Library yara has vulnerability CVE-2021-45429

[github-actions]

https://nvd.nist.gov/vuln/detail/CVE-2021-45429

A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yr_set_configuration in yara/libyara/libyara.c, which could cause a Denial of Service.

[Smjert]

osquery might be affected by this issue but it would be really difficult to trigger due to the need of a second bug that permits to write on the stack in a very specific position.
It's suggested to update, but with low priority.