DOC: injected information on where to report vulnerabilities to every action/filter and also README.md