docs(CHANGES): Detail CVE-2022-21187 libvcs package update

Author: tony

CHANGES

@@ -23,8 +23,8 @@ $ pipx install --suffix=@next 'vcspull' --pip-args '\--pre' --force
 
 ### Security
 
-- Update libvcs 0.11.0 -> 0.11.1 to patch mercurial URL injection
-  vulnerability with URLs ([info](https://github.com/vcs-python/libvcs/pull/306))
+- Update libvcs 0.11.0 -> 0.11.1 to patch [CVE-2022-21187](https://nvd.nist.gov/vuln/detail/CVE-2022-21187): mercurial URL injection
+  vulnerability with URLs arguments ([libvcs#306](https://github.com/vcs-python/libvcs/pull/306))
 
 ### Development