Add advisory for logging of access tokens in matrix-sdk (#1444)

crates/matrix-sdk/RUSTSEC-0000-0000.md

@@ -0,0 +1,18 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "matrix-sdk"
+date = "2022-10-24"
+url = "https://github.com/matrix-org/matrix-rust-sdk/issues/1110"
+
+[versions]
+patched = [">= 0.6.2"]
+unaffected = ["< 0.6.0"]
+```
+
+# matrix-sdk 0.6.0 logs access tokens
+
+When sending Matrix requests using an affected version of `matrix-sdk` in an application that
+writes logs using `tracing-subscriber` (in a way that includes fields of tracing spans such as
+`tracing_subscriber`s default text output from the `fmt` module), these logs will contain the
+user's access token.