dpic: Add reference to CVE-2019-13989

diff --git a/dpic/TODO b/dpic/TODO
new file mode 100644 (file)
index 0000000..b556354
--- /dev/null
+++ b/dpic/TODO
@@ -0,0 +1,2 @@
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2019-13989