Add list of CVEs on the security page ?

[Carreau]

I think it would be good to have a yaml frontmatter on /security page, with

• cve number, (optional not everything has CVE number)
• relevant link(s?) to github advisory,
• Name of reporter.

All should likely be optional.

And maybe render nicely at the bottom of the page as hall of fame.