Descriptions of categories?

[carols10cents]

I'm trying to write up some advisories and I'm not sure what the categories mean 😕 It'd be nice to have a description somewhere, along with some examples of what would fit in each category and what wouldn't?

For example, a crate that's maliciously attempting to steal cryptocurrency, does that go in the category "crypto-failure"? Or is that category crypto as in cryptography?

[tarcieri]

I think cases like this could probably use a new category like malware. Failing that, code-execution probably covers it.

Regarding a list and description of available categories, the rustdoc is the main source of documentation for now:

https://docs.rs/rustsec/latest/rustsec/advisory/enum.Category.html