updates readme to add link to the vulnerability