CGA-g8r9-vv23-f4jf

This vulnerability is related to the 'rsa' dependency, of which zed is already installing the most recent version (0.9.6). There is no release of 'rsa' today with a fix for this vulnerability. The RSA GitHub project repo is working on pre-releases, so a fix may be expected soon. Waiting for upstream (RSA) to cut a new release with a fix, and for zed to consume.