changes: add link to Security Advisory