visidata: Add reference to recent CVEs

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Fri Oct 9 23:33:11 2026 +0200
Changeset:	ed23a9d19a360a0b9f9befb12381f4d045859323

Modified Files:
	visidata/TODO

Log Message:
visidata: Add reference to recent CVEs

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=ed23a9d19a360a0b9f9befb12381f4d045859323

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 visidata/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/visidata/TODO b/visidata/TODO
index c6640a7606..c31d99b633 100644
--- a/visidata/TODO
+++ b/visidata/TODO
@@ -1,3 +1,6 @@
 - Needs testing for real
    - probably mouse handling should be disabled for NetBSD curses(3) and/or make
      it really optional
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2026-41958, CVE-2026-42532