docs: acknowledge Y4tacker security report

[killagu]

Summary

Add a Security Acknowledgements section to SECURITY.md and credit Y4tacker for responsibly reporting the command injection vulnerability in @eggjs/security's escapeShellArg helper.

References

• 4.x fix: fix: escape shell arg single quotes security#106
• 3.x fix: fix: escape shell arg single quotes security#107

Validation

Documentation-only change; verified the acknowledgement and fix links in the rendered Markdown structure.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: abb77a7d-12ed-483d-8dab-eedd284193bd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch agent/add-y4tacker-security-acknowledgement

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[gemini-code-assist]

Code Review

This pull request updates the SECURITY.md file to add a 'Security Acknowledgements' section, thanking a security researcher for reporting a command injection vulnerability. There are no review comments, and I have no additional feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[cloudflare-workers-and-pages]

Deploying egg with    Cloudflare Pages

Latest commit:	24e53d6
Status:	✅  Deploy successful!
Preview URL:	https://d61ab5af.egg-cci.pages.dev
Branch Preview URL:	https://agent-add-y4tacker-security.egg-cci.pages.dev

View logs

[cloudflare-workers-and-pages]

Deploying egg-v3 with    Cloudflare Pages

Latest commit:	24e53d6
Status:	✅  Deploy successful!
Preview URL:	https://5e78754e.egg-v3.pages.dev
Branch Preview URL:	https://agent-add-y4tacker-security.egg-v3.pages.dev

View logs