navidrome: Add reference to CVE-2025-4894[89]

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Sat May 31 18:37:22 2025 +0200
Changeset:	ad21fa35888f9698feb07573550f6d5ba90bc26e

Modified Files:
	navidrome/TODO

Log Message:
navidrome: Add reference to CVE-2025-4894[89]

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=ad21fa35888f9698feb07573550f6d5ba90bc26e

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 navidrome/TODO | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diffs:
diff --git a/navidrome/TODO b/navidrome/TODO
index 81af5fee57..759eb3238d 100644
--- a/navidrome/TODO
+++ b/navidrome/TODO
@@ -1,2 +1,3 @@
 This package has known vulnerabilities, please investigate and fix if possible:
-  CVE-2023-51442, CVE-2024-32963, CVE-2024-47062, CVE-2024-56362, CVE-2025-27112
+  CVE-2023-51442, CVE-2024-32963, CVE-2024-47062, CVE-2024-56362,
+  CVE-2025-27112, CVE-2025-48948, CVE-2025-48949