diff --git a/tcc/TODO b/tcc/TODO
index 02f2cb3cd3..1194e89e9c 100644
--- a/tcc/TODO
+++ b/tcc/TODO
@@ -3,4 +3,4 @@
   NetBSD, but doesn't works fine.
 * Could be a freebsd bug also, I doesn't test it :/
 * This package has known vulnerabilities, please investigate and fix if possible:
-    CVE-2018-20374, CVE-2018-20375, CVE-2018-20376
+    CVE-2018-20374, CVE-2018-20375, CVE-2018-20376, CVE-2019-9754