Skip to content

GHSA-6mc7-6948-w5h4 published, but assigned CVE-2026-49481 still in RESERVED state #8831

Description

@0x5h31d0n

Summary

There appears to be a synchronization issue between a published GitHub Security Advisory and the CVE database.

Repository Security Advisory
GHSA: GHSA-6mc7-6948-w5h4
Repo: seriousm4x/UpSnap
Assigned CVE: CVE-2026-49481
Published: May 26, 2026

Issue

The GHSA was reviewed by GitHub and published with CVE-2026-49481 assigned. However, the CVE record is still showing as RESERVED in the CVE List / NVD, with no description, CVSS, or CWE data populated from the advisory.

Could this be re-synced/published on the CVE side so it reflects the GHSA details?

Reporter: @0x5h31d0n

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions