New vulnerability CVE-2021-43138 for async

Job #2328669294 failed for 30b25978. See https://github.com/advisories/GHSA-fwr7-v2mv-hh25.