Hi!
I ran cargo audit on a project of ours using the Rust SDK, and it flagged that this project depends on a protobuf version vulnerable to RUSTSEC-2024-0437. I don't think this is a real vulnerability in the project, the dependency is through rust-prometheus, and the bug is a crash when reading untrusted data which I doubt Prometheus hits. But the audit issue goes away when upgrading prometheus from 0.13.0 to 0.14.0, and the changelog makes that upgrade seem pretty harmless.