Rasa 3.4+ version are having vulnerabilities in its dependent packages

Currently I am using rasa[transformers]==3.6.4 and rasa-sdk==3.6.1 which requires scipy<1.9.0,>=1.4.1. There are some security vulnerabilities in these versions of scipy. When can we get a new rasa release with updated scipy(1.11.1).