Outdated/Vulnerable dependency on System.Net.Http 4.3.0

I am unable to use this package anymore because System.Net.Http version 4.3.0 has been identified as vulnerable for several reasons. Is there any work in progress to update these packages in the near future? The latest stable version is System.Net.Http version 4.3.4