CVE not assigned for published advisory GHSA-hp8h-jqfm-v7x5 (Athou/commafeed)
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 40/100
- Issue type
- Bug
- Clarity
- Clearly specified
- Activity status
- Active
- Domain
- security
Research direction
The issue is about a missing CVE assignment for a published security advisory. Start by reviewing the advisory at https://github.com/Athou/commafeed/security/advisories/GHSA-hp8h-jqfm-v7x5 to understand the vulnerability. Check the advisory-database's internal processes for CVE assignment, possibly in the repository's documentation or issue history. 'Done' means confirming the CVE request status and ensuring the advisory gets a CVE ID if eligible.
Written by the indexing model from the issue text.
Description
I'm the reporter credited on GHSA-hp8h-jqfm-v7x5 (Host header injection in password reset/logout, CommaFeed <= 7.3.0, fixed in 7.3.1). The maintainer (@Athou) requested a CVE through the advisory and published it on Aug 17, 2026. The advisory still shows "No known CVE" five weeks later.
Could you check whether the CVE request was received, declined, or dropped, and assign an ID if the advisory is eligible?
Advisory: https://github.com/Athou/commafeed/security/advisories/GHSA-hp8h-jqfm-v7x5
- Dominant language
- No language data
- Stars
- 2.5k
- Forks
- 772
- Avg merge
- 3d 15h
- Merged PRs (30d)
- 46
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from github/advisory-database
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
github/advisory-database#9255 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#9164 · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#8994 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
github/advisory-database#8898 · 4 comments · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#8841 ·
All issues in github/advisory-database
Similar issues
-
needs-triage
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Nmap
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Mend: dependency security vulnerability untriaged
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
-
blocklist removal
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
MetaMask/eth-phishing-detect#296544 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Azure/azure-functions-docker#1257 ·