security/vuxml: Document ACE vulnerability in math/R

In versions released before 4.4.0, the R statistical program is
vulnerable to CVE-2024-27322, which allows maliciously crafted RDS (R
Data Serialization) files or R packages to run arbitrary code.

Sponsored by: The FreeBSD Foundation