Vulnerability from time crate

[jaques-sam]

I don't see it being dependent on time from Cargo.toml, but still I get this in the sdp-rs crate with chrono's latest version?:
I don't see how this is possible, yet how do I solve this?

❯ cargo audit  
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 562 security advisories (from /home/samja/.cargo/advisory-db)
    Updating crates.io index
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (43 crate dependencies)
Crate:     time
Version:   0.1.45
Title:     Potential segfault in the time crate
Date:      2020-11-18
ID:        RUSTSEC-2020-0071
URL:       https://rustsec.org/advisories/RUSTSEC-2020-0071
Severity:  6.2 (medium)
Solution:  Upgrade to >=0.2.23
Dependency tree:
time 0.1.45
└── chrono 0.4.26
    └── sdp-rs 0.2.1

error: 1 vulnerability found!

[djc]

See #602.