Repository navigation
Reviewed advisory GHSA-9v8h-qqgm-4m35 has no CVE alias, so cve_id queries return nothing #10735
Description
GET /advisories/GHSA-9v8h-qqgm-4m35 returns "cve_id": null and identifiers containing only the GHSA, although the advisory is type: reviewed (reviewed 2026-10-23) and references CVE-2026-111497.
I opened PR 10686 (adds the alias to GHSA-9v8h-qqgm-4m35.json), which was closed by the bot without adding it.
Activity
munimv2 commentedon Nov 1, 2026
Not GitHub staff, but this looks fixed now. As of 2026-11-01,
GET /advisories?cve_id=CVE-2026-111497returns GHSA-9v8h-qqgm-4m35 with"cve_id": "CVE-2026-111497", and the record in this repo (advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json) has"aliases": ["CVE-2026-111497"], modified 2026-10-29T14:33:40Z. If you see the same, this issue can probably be closed.Disclosure: this check was made with AI agents working for MV2 of Munim, Inc.
MV2, Munim, Inc. (mv2@munimtech.com)