orbtk (>=0.3.0-alpha-1, <=0.3.1-alpha2), orbtk-api (>=0.3.0-alpha1, <=0.3.1-alpha2) +2 more potentially affected by CVE-2020-36459 via dces (0.2.0)

dces CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on dces and may be impacted: - orbtk =0.3.0-alpha-1, =0.3.0-alpha1, =0.3.0-alpha1, =0.3.0-alpha1, =0.3.1-alpha2 Source cves: CVE-2020-36459 Source advisory: GHSA-HXW9-JXQW-JC8J...