Issues

• Assign finder Credit in CVE-2026-115917

  github/advisory-database#10761 · Filter by author prnjlksingh opened on Oct 29, 2026

• Multiple published repository advisories not appearing in the Advisory Database after 5–16 days

  github/advisory-database#10746 · Filter by author louisdussarps opened on Oct 28, 2026

• GHSA-f9pq-63hg-w434: version 0.1.1 of @ensdomains/buffer appears to be a legitimate 2023 release, not the Shai-Hulud 2.0 version

  github/advisory-database#10743 · Filter by author Ludion-ai opened on Oct 28, 2026

• Credit + review request: CVE-2026-108100 (GHSA-cwp7-9356-rvxx) & CVE-2026-108101 (GHSA-m2c2-px87-9hp9) — reporter @hackchang per published source advisories

  github/advisory-database#10742 · Filter by author hackchang opened on Oct 28, 2026

• Reviewed advisory GHSA-9v8h-qqgm-4m35 has no CVE alias, so cve_id queries return nothing

  github/advisory-database#10735 · Filter by author Guluis opened on Oct 28, 2026

• Review request: GHSA-p3jp-9v83-76w9 (CVE-2026-111497, .NET Brotli decoder OOB write)

  github/advisory-database#10733 · Filter by author rein-netanel opened on Oct 28, 2026

• Missing php2shell Advisories? Unable to contribute to the advisory database

  github/advisory-database#10711 · Filter by author NewEraCracker opened on Oct 27, 2026

• [GHSA-v5x3-rpx2-5xp4] Malware advisory for @pingone/net (npm): legitimate package is Ping Identity-internal and never publicly published; affected range ">= 0" is incorrect

  github/advisory-database#10704 · Filter by author volcanic82 opened on Oct 27, 2026

• GHSA-wqvf-7262-m7g8 is missing in GitHub Advisory Database

  github/advisory-database#10688 · Filter by author daniladomoroshchenov opened on Oct 26, 2026

• ฟ

  github/advisory-database#10538 · Filter by author patipatjjj123-prog opened on Oct 25, 2026

• False positive: GHSA-9wgc-5pgr-25p3 / MAL-2026-18220 (npm "skillward") is a security scanner, not malware

  github/advisory-database#10534 · Filter by author antshkvr opened on Oct 24, 2026
  1

• Update GHSA-vhcg-r2h4-gx3m: Scope affected version to =0.4.1 and add patched version 0.4.2 (@syncraft-labs/core)

  github/advisory-database#10518 · Filter by author denislistiadi opened on Oct 23, 2026

• GitHub-reviewed and GitHub-issued CVEs missing in GitHub Advisory Database

  github/advisory-database#10423 · Filter by author muhammad-usama-sardar opened on Oct 18, 2026

• Request manual publication override for CVE-2026-92704 (GHSA-fr3v-rvqp-8fx3)

  github/advisory-database#10402 · Filter by author asmitdam72-cell opened on Oct 16, 2026

• Duplicate advisory: GHSA-6m87-8wg6-hh8w and GHSA-6v38-4h7w-rj9h (CVE-2026-96760, authlib)

  github/advisory-database#10359 · Filter by author azmeuk opened on Oct 14, 2026

• Reconcile VeraCrypt advisory records for CVE-2026-108982

  github/advisory-database#10349 · Filter by author idrassi opened on Oct 14, 2026

• Eight published repository advisories not appearing in the global Advisory Database

  github/advisory-database#10342 · Filter by author thebenignhacker opened on Oct 13, 2026

• CVE-2026-92163 still RESERVED after repository advisory GHSA-7p8v-4g9w-9qfp was published

  github/advisory-database#10297 · Filter by author Alberto115x opened on Oct 10, 2026

• Missing advisory: CVE-2025-5890 affects npm @actions/glob but has no GHSA, so it is absent from OSV

  github/advisory-database#10230 · Filter by author sonukapoor opened on Oct 8, 2026

• Allow a CVE to be linked to multiple GHSAs (or expose CVE relationships in structured data) so reviewed advisories don't lose their CVE

  github/advisory-database#10224 · Filter by author yusuke-koyoshi opened on Oct 8, 2026

• Threat/Temporal metrics in CVSS vectors make severity time-dependent and inconsistent with how the Advisory Database displays and edits CVSS

  github/advisory-database#10211 · Filter by author yusuke-koyoshi opened on Oct 7, 2026

• CVE not assigned for published advisory GHSA-fhp4-pr5j-46m5 (julianhille/MuhammaraJS)

  github/advisory-database#10183 · Filter by author r3d5t0x3 opened on Oct 6, 2026
  2

• GHSA-ch52-4w7c-c8xp (CVE-2026-93748) claim of bogus report by repo owner

  github/advisory-database#10139 · Filter by author MikeMcC399 opened on Oct 4, 2026
  3

• recognize github repositories in advisories

  github/advisory-database#10118 · Filter by author edwintorok opened on Oct 2, 2026

• support opam ecosystem for packages that are on github

  github/advisory-database#10117 · Filter by author edwintorok opened on Oct 2, 2026
  1