security/vuxml: Document CVE-2021-28091 for security/lasso.
PR: 256373 Reported by: spam123@bitbert.com