Context
rust-xdr v0.4.4 has a dependency env_logger v0.4.3 which in turn has a sub-dependency regex v0.2.11. However, regex v0.2.11 has a high sev vulnerability linked here. We use rust-xdr v0.4.4 in our package and this is creating security issues for our build. We tried updating rust-xdr but it seems like v0.4.4 is the latest version.
Desired Solution
Update rust-xdr to use a newer version of env_logger or regex such that regex has a version higher than 1.5.5.
Context
rust-xdr v0.4.4has a dependencyenv_logger v0.4.3which in turn has a sub-dependencyregex v0.2.11. However,regex v0.2.11has a high sev vulnerability linked here. We userust-xdr v0.4.4in our package and this is creating security issues for our build. We tried updatingrust-xdrbut it seems likev0.4.4is the latest version.Desired Solution
Update
rust-xdrto use a newer version ofenv_loggerorregexsuch that regex has a version higher than 1.5.5.