README - link to the issue that introduced the security vulnerability