There is sadly a lot that is missed by cargo audit, far from everyone report their vulnerabilities to rustsec.