docs(CHANGELOG): add a security note to the 1.3.2 log