[dart:html] Add security advisory to CHANGELOG

Change-Id: I3f5b58533e8dc51a16f2ae7701c7902fbecc084c
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/197445
Auto-Submit: Srujan Gaddam <srujzs@google.com>
Commit-Queue: Sigmund Cherem <sigmund@google.com>
Reviewed-by: Sigmund Cherem <sigmund@google.com>
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 842903d..0c0ae9b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -223,8 +223,11 @@
 ## 2.12.3 - 2021-04-14
 
 This is a patch release that fixes a vulnerability in `dart:html` related to
-DOM clobbering. Thanks again to **Vincenzo di Cicco** for finding and reporting
-this vulnerability.
+DOM clobbering. See the [vulnerability advisory][CVE-2021-22540] for more
+details. Thanks again to **Vincenzo di Cicco** for finding and reporting this
+vulnerability.
+
+[CVE-2021-22540]: https://github.com/dart-lang/sdk/security/advisories/GHSA-3rfv-4jvg-9522
 
 ## 2.12.2 - 2021-03-17