According to Dependabot, several vulnerabilities exist in used versions of transitive dependencies. They can't be fixed automatically. https://github.com/zelr0x/rust-in-action/security/dependabot