Fix link to Cabal issue in security note