Crates.io vulnerability: Use-after-free in librsvg identified

A recent vulnerability has been identified in the librsvg library hosted on crates.io, specifically a use-after-free issue that arises when XML includes contain duplicated entities. This vulnerability, cataloged as RUSTSEC-2026-0305, was published yesterday and has been assigned a high severity rating of 7.1. Developers utilizing this library should be aware of the potential risks and check for available fixes to ensure their applications remain secure.

In addition to the librsvg vulnerability, several other issues have been reported on crates.io, including a path traversal vulnerability in the `uncbv` package and a double free issue in the `StackVec::retain` function. These vulnerabilities highlight the importance of maintaining up-to-date dependencies and monitoring for model updates that could impact agent workflows. Developers leveraging OpenClaw's API and SDK should consider implementing robust developer tooling to manage these risks effectively.