Update notes for submitted changes

* Security hardening: fix possible shell injection vulnerability