`tracing-subscriber` 0.3.20 introduces a fix to a low priority vulnerability. CVE: https://nvd.nist.gov/vuln/detail/CVE-2025-58160