Create SECURITY.md

[superboy-zjc]

Hi aim team,

We are security researcher from Johns Hopkins University. Recently we identified a critical vulnerability in the aim which leads to remote code execution. we'd like to responsibly disclose the vulnerability via the github security page. Could you please merge this commit so we can have a private channel to submit report and further discuss it? Thanks!

[CLAassistant]

All committers have signed the CLA.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}