The `smallvec` crate should be updated to `v1.6.1` or soundness of a `v1.0` patch must be implemented+validated. See: - relevant [issue](https://github.com/servo/rust-smallvec/issues/252) - relevant [pr](https://github.com/servo/rust-smallvec/pull/254) - [RustSec Advisory](https://rustsec.org/advisories/RUSTSEC-2021-0003.html) (disclosed January 8, 2021)