Amend CVE note and security guide section wordings
#34392

gmcgibbon wants to merge gmcgibbon:gem_security_note_amend into rails:master

We do not currently have an analysis of these two commits