security/vuxml: Update CVE-2019-18348 and CVE-2020-8492 entries

Python 3.6 and 3.7 are not vulnerable in the ports tree anymore.
Change range for python35 to <le>, suggested by swills.

PR: 246984, 246738