Alternate for tensorflow in Rasa 2.8.x

Rasa Open Source
1

We are using Rasa 2.8.10 and which used Tensorflow 2.6.2, but this version of tensorflow is vulnerable as per - NVD - CVE-2021-35958.

Is there any alternative dependency for tensorflow for Rasa 2.8.x?

2

Is there other way to get around it? We are seeing similar vulnerability reported in RASA 3.1.0 as well?