act: Add references to CVE-2026-3404[12]

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Thu Apr 2 19:27:13 2026 +0200
Changeset:	ba7a36dae813a5f9cb91d5ab48e954209895bede

Modified Files:
	act/TODO

Log Message:
act: Add references to CVE-2026-3404[12]

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=ba7a36dae813a5f9cb91d5ab48e954209895bede

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 act/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/act/TODO b/act/TODO
index 10c55d82f7..ceea318035 100644
--- a/act/TODO
+++ b/act/TODO
@@ -1,2 +1,5 @@
 - Improve DESCR by writing more information but at the same time
   avoiding "marketing"-ish like stuffs that are in upstream README.md
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2026-34041, CVE-2026-34042