linked-hash-map < 0.5.3 is unsound

[RalfJung]

Old versions of linked-hash-map incorrectly create an uninitialized NonNull (contain-rs/linked-hash-map#100). This was fixed with version 0.5.3.

The advisory should probably follow whatever policy ends up being in place for soundness bugs.