diff --git a/yara-x.yaml b/yara-x.yaml
index d68fa734925..6948e61eb59 100644
--- a/yara-x.yaml
+++ b/yara-x.yaml
@@ -1,7 +1,7 @@
 package:
   name: yara-x
   version: "1.10.0"
-  epoch: 0
+  epoch: 1 # GHSA-9c48-w39g-hm26
   description: "A rewrite of YARA in Rust."
   copyright:
     - license: BSD-3-Clause
diff --git a/yara-x/cargobump-deps.yaml b/yara-x/cargobump-deps.yaml
index faccae6f085..7b15b69c1e7 100644
--- a/yara-x/cargobump-deps.yaml
+++ b/yara-x/cargobump-deps.yaml
@@ -5,3 +5,5 @@ packages:
     version: 0.5.15
   - name: wasmtime
     version: 37.0.3
+  - name: rsa
+    version: 0.9.10