Add CVE mapping

crates/hyper/RUSTSEC-2016-0002.toml

@@ -17,6 +17,7 @@ CA-issued certificate, even if there's a hostname mismatch.
 The problem was addressed by leveraging rust-openssl's built-in support for
 hostname verification.
 """
+aliases = ["CVE-2016-10932"]
 
 [affected]
 os = ["windows"]

crates/hyper/RUSTSEC-2017-0002.toml

@@ -13,6 +13,7 @@ is if an application constructs headers based on unsanitized user input.
 This issue was fixed by replacing all newline characters with a space during serialization of
 a header value.
 """
+aliases = ["CVE-2017-18587"]
 
 [versions]
 patched = [">= 0.10.2", "< 0.10.0, >= 0.9.18"]