Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

CVE request status for GHSA-2mcf-xcq4-jvpf and GHSA-wqgw-crr5-cr2p

Open
#9,479 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Active
Tech stack
github, python, rust
Domain
security

Research direction

Review the two linked GitHub Security Advisories and the repository security advisory workflow referenced in the issue. Confirm whether the existing CVE requests are pending or need more information, and document the appropriate contact route or status response.

Written by the indexing model from the issue text.

Description

I am following up on two published repository security advisories:

  1. Bernstein

  2. VTCode

According to the repository maintainers, CVE requests were submitted through GitHub's repository security advisory workflow for both advisories. I do not know the exact request dates. Both advisories are public but currently show no associated CVE identifier.

Could you confirm whether these existing CVE requests are pending or require additional information? If this is not the appropriate channel, please direct me to the correct contact route.

I understand there may be a processing backlog. This is a status inquiry for existing CVE requests, not a duplicate CVE request.

Dominant language
No language data
Stars
2.5k
Forks
772
Avg merge
3d 18h
Merged PRs (30d)
48

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from github/advisory-database

All issues in github/advisory-database

Similar issues

More Security issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.