See GHSA-r7pg-4xrf-7mrm

I would suggest denoting specifically the versions that fixed the patch in each MC version as mentioned in the table under "Patches" in that link. I think just "<4.7.3" could be misleading as that seems to be referencing 1.16 versions only even though patches were released in 1.15 and 1.12.

Actually, just saw this comment from modmuss, probably unnecessary to include what I suggested in the readme and it is mentioned in the security advisory.