hex: Add reference to CVE-2026-32148

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Sat May 2 21:56:59 2026 +0200
Changeset:	a29e07aa0897f3821e51249fe3755bd5a8c3548e

Modified Files:
	hex/TODO

Log Message:
hex: Add reference to CVE-2026-32148

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=a29e07aa0897f3821e51249fe3755bd5a8c3548e

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 hex/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/hex/TODO b/hex/TODO
index 4d444a15da..93a42005e0 100644
--- a/hex/TODO
+++ b/hex/TODO
@@ -13,3 +13,6 @@ http://shadow.netbsd.org/pub/pkgsrc/packages/reports/HEAD/NetBSD-10.0-x86_64/202
         (mix 1.17.2) lib/mix/utils.ex:576: anonymous fn/2 in Mix.Utils.read_path/2
         (elixir 1.17.2) lib/task/supervised.ex:101: Task.Supervised.invoke_mfa/2
         (elixir 1.17.2) lib/task/supervised.ex:36: Task.Supervised.reply/4
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2026-32148