ruby-sanitize: Add CVE-2020-4054 to TODO

[Travis Paul <tr%vispaul.me@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Travis Paul <tr%vispaul.me@localhost>
Pushed By:	tpaul
Date:		Thu Jun 18 00:36:34 2020 +0000
Changeset:	36edaabb5b11c0df479e346cc0044e6f0538f2f9

Added Files:
	ruby-sanitize/TODO

Log Message:
ruby-sanitize: Add CVE-2020-4054 to TODO

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=36edaabb5b11c0df479e346cc0044e6f0538f2f9

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 ruby-sanitize/TODO | 2 ++
 1 file changed, 2 insertions(+)

diffs:
diff --git a/ruby-sanitize/TODO b/ruby-sanitize/TODO
new file mode 100644
index 0000000000..38e9c70c6d
--- /dev/null
+++ b/ruby-sanitize/TODO
@@ -0,0 +1,2 @@
+This package has known vulnerabilities, please investigate and fix if possible:
+        CVE-2020-4054