Security vulnerability found by cargo audit

[mnhauke]

$ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 665 security advisories (from /home/mhauke/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (491 crate dependencies)
Crate:     rsa
Version:   0.9.6
Title:     Marvin Attack: potential key recovery through timing sidechannels
Date:      2023-11-22
ID:        RUSTSEC-2023-0071
URL:       https://rustsec.org/advisories/RUSTSEC-2023-0071
Severity:  5.9 (medium)
Solution:  No fixed upgrade is available!
Dependency tree:
rsa 0.9.6
└── yara-x 0.10.0
    ├── yara-x-py 0.10.0
    ├── yara-x-cli 0.10.0
    └── yara-x-capi 0.10.0

error: 1 vulnerability found!

See
https://rustsec.org/advisories/RUSTSEC-2023-0071 and discussion at
RustCrypto/RSA#19
for details.

[plusvic]

This vulnerability doesn't seem to affect here, YARA-X doesn't deal with RSA private keys that should be kept safe. It uses RSA only for validating signatures with public keys.