Hi @giuscris,
The advisory activity shows that a CVE was requested on August 22, 2026, but it currently displays "No known CVE" and allows another CVE request. Did GitHub reject, cancel, or request additional information regarding the original request?
For coordination and to avoid a duplicate assignment: VulDB submission #992820 now exists and includes a CVE request for this same vulnerability. Please do not submit a second GitHub CVE request until we clarify the status of the original request and coordinate which CNA should handle it.
Thank you.
Reference: GHSA-p78q-v3pr-p87j
Hi @giuscris,
The advisory activity shows that a CVE was requested on August 22, 2026, but it currently displays "No known CVE" and allows another CVE request. Did GitHub reject, cancel, or request additional information regarding the original request?
For coordination and to avoid a duplicate assignment: VulDB submission #992820 now exists and includes a CVE request for this same vulnerability. Please do not submit a second GitHub CVE request until we clarify the status of the original request and coordinate which CNA should handle it.
Thank you.
Reference: GHSA-p78q-v3pr-p87j