docs(changelog): update security disclosure credit