Skip to content

[GHSA-7574-87vg-px7c] Published repository advisory has not reached the database #10092

Description

@manolo

Same situation as GHSA-gwfx-7pfc-xg68, filed separately.

  • Advisory: GHSA-7574-87vg-px7c in vaadin/flow-components, state published since 2026-10-01T05:08:13Z, 11 affected Maven packages
  • CVE: CVE-2026-93547, published on cve.org on 2026-09-30

It returns 404 as a global advisory, and querying by CVE id returns only GHSA-74m8-whmf-rxrq, the automatically ingested copy, which is unreviewed with no packages.

Could the repository advisory be published to the database, and GHSA-74m8-whmf-rxrq merged into it or withdrawn?

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions