security/vuxml: Document spamassassin CVE-2020-1946 PR: 254526 Security: https://s.apache.org/ng9u9 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-1946