updated README to add vulnerability list