nix: Add recent CVEs

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Fri Apr 17 23:23:29 2026 +0200
Changeset:	c93729be773bc708aafb72282b05f544ff295f2a

Modified Files:
	nix/TODO

Log Message:
nix: Add recent CVEs

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=c93729be773bc708aafb72282b05f544ff295f2a

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 nix/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/nix/TODO b/nix/TODO
index 33ff239b7c..efef729bb6 100644
--- a/nix/TODO
+++ b/nix/TODO
@@ -42,3 +42,6 @@ src/libmain/shared.hh:99:9: error: declaration of '__sF' as array of references
       |         ^~~~~~
 gmake: *** [mk/patterns.mk:3: src/libmain/stack.o] Error 1
 *** Error code 2
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2026-39860