ue-rs has dependencies on rsa crate, which has an open security issue about Marvin attack since months. However, the project is probably not going to address the issue any time soon.

It is probably worth reimplementing rsa-related code in ue-rs directly using openssl, dropping dependency on rsa.