Process CVE-2019-10905 as NFU

This though might be tricky, icingaweb2 seem to embed the PHP library
and thus might be affected of the issue. One older CVE was marked in
same way but we might need to re-evaluate in the light of icingaweb2
using it.