Add TODO file to record its vulnerabilities.