Informational advisory for rust-lang-deprecated/failure#336

crates/failure/RUSTSEC-0000-0000.toml

@@ -0,0 +1,20 @@
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "failure"
+date = "2019-11-13"
+informational = "unsound"
+title = "__private_get_type_id__ can be overriden with safe Rust code"
+url = "https://github.com/rust-lang-nursery/failure/issues/336"
+keywords = ["unsound"]
+description = """
+Safe Rust code can implement malfunctioning `__private_get_type_id__` and cause
+type confusion when downcasting, which is an undefined behavior.
+
+Normal users of Failrue library are not affected.
+"""
+
+[affected]
+functions = { "failure::Fail::__private_get_type_id__" = [">= 0.1.0"] }
+
+[versions]
+patched = []