See the issue linked in audit.toml for more info.
criterion.rs replaced serde_cbor in 0.4.0 so we should have removed this workaround when upgrading to 0.4.0.
serde_cbor