A vulnerability in crypto-js

[CandyYi]

Hi jsrsasign team,

First of all, thank you so much for maintaining this package!

There is a vulnerability CVE-2023-46233 reported on crypto-js and the fix is in the latest v4.2. Any plan to pick up the fix?

Thanks!