Hi,
GHSA-gf2q-c269-pqgc had a CVE assigned May 13th, was published (by the maintainer) on May 24, and by Github on May 27
The linked CVE (CVE-2026-45618) is still marked as reserved?
Is that an issue on your end (something like #8479?), or with/from NVD?
Given this comment in a spam PR, it's probably the latter?
P.S. there's a typo in the contributing guidelines (I would PR a fix, but I don't think the automation is layed out in a way to support that)
Hi,
GHSA-gf2q-c269-pqgc had a CVE assigned May 13th, was published (by the maintainer) on May 24, and by Github on May 27
The linked CVE (CVE-2026-45618) is still marked as reserved?
Is that an issue on your end (something like #8479?), or with/from NVD?
Given this comment in a spam PR, it's probably the latter?
P.S. there's a typo in the contributing guidelines (I would PR a fix, but I don't think the automation is layed out in a way to support that)