CVE-2024-23342 (ecdsa) fixed by upgrading sendgrid from 6.12.4 to 6.12.5, which replaces ecdsa with cryptography. ecdsa dependency removed entirely.