Dependency jiter is currently set to 0.15.0 which uses the (default) num-bigint feature, which pulls in pyo3 0.28.2 that is affected by GHSA-chgr-c6px-7xpp .
It seems the resolution would be to either update jiter to 0.16.0, or alternatively if the num-bigint feature is not used, not using any of its default features. Is either currently on the roadmap?
Thanks!
Dependency
jiteris currently set to0.15.0which uses the (default)num-bigintfeature, which pulls inpyo3 0.28.2that is affected by GHSA-chgr-c6px-7xpp .It seems the resolution would be to either update
jiterto0.16.0, or alternatively if thenum-bigintfeature is not used, not using any of its default features. Is either currently on the roadmap?Thanks!