security/vuxml: Document jackson vulnerabilities
jackson-databind before 2.22.2 by-passes @JsonView and @JsonIgnore in
several ways and validates polymorphic types incompletely, jackson-core
before 2.22.2 can be driven past StreamReadConstraints.
Security: 0cb401f9-9f19-11f1-a655-3497f65b111b
Security: 0cb42b4a-9f19-11f1-a655-3497f65b111b
Sponsored by: Netzkommune GmbH