security/vuxml: Document h2o vulnerability
PR: 215587 Submitted by: Dave Cottlehuber <dch@skunkwerks.at> (maintainer)