Add remote DoS advisory for negentropy

[yukibtc]

Affected crate(s)

• negentropy (782,627 recent downloads per crates.io)

Links to upstream issue(s) or PR(s)

• Reject ID lists longer than the message holding them nostrdevkit/negentropy#14

Severity

Allows remote DoS via excessive memory allocation triggered by a malicious reconciliation message, causing the application to abort.

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate