It looks bad: Security hole in popular library (crate) and you need to update everything (and, probably, wait till authors of software update their dependencies

It looks bad: Security hole in popular library (crate) and you need to update everything (and, probably, wait till authors of software update their dependencies) instead of update one system library.