tiny-dfr (>=0.1.1, <=0.3.1) potentially affected by CVE-2026-96889 via librsvg (2.58.5)

librsvg CARGO version 2.58.5 is affected by a known vulnerability. The following packages have a transitive dependency on librsvg and may be impacted: - tiny-dfr =0.1.1, =0.3.1 Source cves: CVE-2026-96889 Source advisory: OSV:RUSTSEC-2026-0305...