Does the emudhra certificate leak affect cargo?

There's a update for rustup, but not for cargo, is that because cargo was only indirectly affected (e.g. because it just uses the OS's certificates), or is it still vulnerable?