sftpgo: Add reference to CVE-2026-3091[45]

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Wed Mar 18 11:09:19 2026 +0100
Changeset:	d4b56a3f22d4720ead7daf43f61d8f8f1d27dc8e

Added Files:
	sftpgo/TODO

Log Message:
sftpgo: Add reference to CVE-2026-3091[45]

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=d4b56a3f22d4720ead7daf43f61d8f8f1d27dc8e

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 sftpgo/TODO | 2 ++
 1 file changed, 2 insertions(+)

diffs:
diff --git a/sftpgo/TODO b/sftpgo/TODO
new file mode 100644
index 0000000000..f2710d38de
--- /dev/null
+++ b/sftpgo/TODO
@@ -0,0 +1,2 @@
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2026-30914, CVE-2026-30915