I recently started using this crate and now it turns up in my audit scan with this: https://rustsec.org/advisories/RUSTSEC-2024-0436.html Maybe you can fix this for your next release?