update readme about security bugs