Issues

• Missing advisory: CVE-2025-5890 affects npm @actions/glob but has no GHSA, so it is absent from OSV

  github/advisory-database#10230 · Filter by author sonukapoor opened on Oct 8, 2026 · Updated on Oct 8, 2026

• Allow a CVE to be linked to multiple GHSAs (or expose CVE relationships in structured data) so reviewed advisories don't lose their CVE

  github/advisory-database#10224 · Filter by author yusuke-koyoshi opened on Oct 8, 2026 · Updated on Oct 8, 2026

• Threat/Temporal metrics in CVSS vectors make severity time-dependent and inconsistent with how the Advisory Database displays and edits CVSS

  github/advisory-database#10211 · Filter by author yusuke-koyoshi opened on Oct 7, 2026 · Updated on Oct 7, 2026

• GHSA-ch52-4w7c-c8xp (CVE-2026-93748) claim of bogus report by repo owner

  github/advisory-database#10139 · Filter by author MikeMcC399 opened on Oct 4, 2026 · Updated on Oct 7, 2026
  1

• [GHSA-vffh-x6r8-xx99] [CVE-2026-40179] Doesn't show all remediated versions (particularly v3.5.2's go counterpart v0.305.2)

  github/advisory-database#7537 · by Filter by author MartinFalatic was closed on Oct 6, 2026 · Updated on Oct 6, 2026

• CVE not assigned for published advisory GHSA-fhp4-pr5j-46m5 (julianhille/MuhammaraJS)

  github/advisory-database#10183 · Filter by author r3d5t0x3 opened on Oct 6, 2026 · Updated on Oct 6, 2026
  2

• [GHSA-78fc-9688-w8xw] Malformed CVSS4 vector

  github/advisory-database#7882 · by Filter by author S4mB3ckS was closed on Oct 5, 2026 · Updated on Oct 5, 2026
  1

• Request to publish reserved CVE-2026-33944 (GHSA-v5fq-cf5m-vwv7) — maintainer abandoned GitHub advisories and consents to publication

  github/advisory-database#10178 · Filter by author F37I5H opened on Oct 5, 2026 · Updated on Oct 5, 2026
  1