Report incorrect group information in users

Author: danth

crates/users/RUSTSEC-0000-0000.md

@@ -0,0 +1,21 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "users"
+date = "2025-01-15"
+url = "https://github.com/ogham/rust-users/issues/44"
+categories = ["privilege-escalation"]
+
+[versions]
+patched = []
+unaffected = ["<= 0.7.0"]
+```
+
+# `root` appended to supplementary groups
+
+Affected versions append the `root` group to the supplementary groups of a user, regardless of their actual membership.
+This occurs unless the user is a member of exactly 1024 supplementary groups.
+
+If the caller uses this information for access control, this may lead to privilege escalation.
+
+This crate is not currently maintained, so a patched version is not available.