Update information on CVE-2018-1109/node-braces

The issue does not affect any version released in Debian as the issue
was introduced only 2.2.0 upstream via the commit
https://github.com/micromatch/braces/commit/dcc1acab4de9a43e86ab4be4acde209ff1dca113
.

Thanks: Xavier Guimard <yadd@debian.org>