security/vuxml: Document Go vulnerability
While here, fix package names for the previous Go entry (we also have go117 now).