Status inquiry: Unreviewed advisory GHSA-567r-vvh5-jjr8 (CVE-2026-13006)
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 20/100
Research direction
No source file, test, or entry point is named. Start by reviewing GHSA-567r-vvh5-jjr8 and the linked NVD information, then follow the advisory review process; done means the review status is updated or the team provides a timeline or explanation.
Written by the indexing model from the issue text.
Description
Hello GitHub Security Advisory team,
I am writing to ask about the review timeline for GHSA-567r-vvh5-jjr8 (CVE-2026-13006 - https://github.com/advisories/ghsa-567r-vvh5-jjr8), which affects ch.qos.logback:logback-core.
This is a high-severity Arbitrary Code Execution (ACE) vulnerability that has been published in the NVD for over a month, but it is currently sitting in the "Unreviewed" state in the GitHub Advisory Database.
Because it is marked as Unreviewed, standard SCA scanners that rely on GHSA (like Trivy) are completely ignoring it, leaving users unaware and exposed.
Could you provide any insight into how long it typically takes to process and update the status for critical advisories like this one, or if there is anything the community can do to help expedite the review?
Thank you!
- Dominant language
- No language data
- Stars
- 2.5k
- Forks
- 772
- Avg merge
- 3d 18h
- Merged PRs (30d)
- 48
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from github/advisory-database
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
github/advisory-database#9255 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#9164 · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#8994 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
github/advisory-database#8898 · 4 comments · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#8841 ·
All issues in github/advisory-database
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
docToolchain/docToolchain#1705 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
modelcontextprotocol/python-sdk#3566 ·
-
Mend: dependency security vulnerability status: needs triage 🕵️♀️
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
carbon-design-system/ibm-products#9907 ·
-
agent/security hive/hosted-available-lke648397-260827-5n31 security
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
canonical/paas-charm#368 · 1 comment ·