Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
`ajv` is named in `yarn.lock` and several `package-lock.json` files in the rust source tarball, but the actual `ajv` package is not present. Furthermore, none of that is used in the build, nor included in any of our final packages.