Hello,
While running Trivy scan on my projects, I see the following issues being raised
GHSA-pwjx-qhcg-rvj4: rustls-webpki
CVE-2026-33055 & CVE-2026-33056: tar-rs
Both packages have version that fix these issues:
These modifications have related PR created by dependabot. Can these PRs be processed by maintainers and included in a future release?
Thank you,
Regards,