chakracore: Add TODO with some recent CVEs

[Travis Paul <tr%vispaul.me@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Travis Paul <tr%vispaul.me@localhost>
Pushed By:	tpaul
Date:		Sun Sep 13 17:09:01 2020 +0000
Changeset:	2ef3e5fb0047ea77dc6109e8165789d26711566b

Added Files:
	chakracore-git/TODO

Log Message:
chakracore: Add TODO with some recent CVEs

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=2ef3e5fb0047ea77dc6109e8165789d26711566b

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 chakracore-git/TODO | 2 ++
 1 file changed, 2 insertions(+)

diffs:
diff --git a/chakracore-git/TODO b/chakracore-git/TODO
new file mode 100644
index 0000000000..18c3f3f1cd
--- /dev/null
+++ b/chakracore-git/TODO
@@ -0,0 +1,2 @@
+This package has known vulnerabilities, please investigate and fix if possible:
+CVE-2020-1057, CVE-2020-1180, CVE-2020-1172