PHPUnit: add a note about CVE-2017-9841

diff --git a/PHPUnit/TODO b/PHPUnit/TODO
new file mode 100644 (file)
index 0000000..b69ed25
--- /dev/null
+++ b/PHPUnit/TODO
@@ -0,0 +1,2 @@
+- This package has known vulnerabilities, please investigate and fix if possible:
+   CVE-2017-9841