second disclosure in a row I forget the advisory link

Author: pietroalbini

posts/2023-08-03-cve-2023-38497.md

@@ -7,7 +7,7 @@ author: The Rust Security Response WG
 > This is a cross-post of [the official security advisory][advisory]. The
 > official advisory contains a signed version with our PGP key, as well.
 
-[advisory]: TODO
+[advisory]: https://groups.google.com/g/rustlang-security-announcements/c/PEZQleQ6IUY
 
 The Rust Security Response WG was notified that Cargo did not respect the umask
 when extracting crate archives on UNIX-like systems. If the user downloaded a