chore(docs): add AND/XOR bug to bug list (#13784)

This pr adds AND/XOR bug from barretenberg/stdlib/logic to bug list

Author: defkit

barretenberg/security/entomaxy/List of security bugs.md

@@ -20,3 +20,4 @@ This list is a collection of bugs. Its goal is to help developers, auditors and
 | BarVD-012 | Account circuit | same public key can be used for multiple accounts | Soundness | Spending other person's funds | Manual code review | No | Yes | @arielgabizon | | | [Description](https://hackmd.io/@aztec-network/HJDt63w69?type=view) |
 | BarVD-013 | Join-split circuit | public key nullifier uses only the x coordinate of the public key | Soundness | Spending other person's funds | Manual code review | No | Yes | @arielgabizon | | | [Description](https://hackmd.io/@aztec-network/HJDt63w69?type=view) |
 | BarVD-014 | claim-proof circuit | incorrect implementation of integer arithemtic in field | Soundness | Draining rollup funds | Manual code review | No | No | [@lucash-dev](https://github.com/lucash-dev) | | | [Description](https://hackmd.io/@aztec-network/claim-proof-bug) |
+| BarVD-015 | stdlib/logic | 3bit overflow in AND/XOR | Soundness |  | acir_formal_proofs | Yes | Yes | @defkit & @Sarkoxed | | https://github.com/AztecProtocol/aztec-packages/pull/11651 |  |