Posted by Simon McVittie on Sep 22 We've eventually been able to obtain CVE IDs for most of these (two are still pending). I requested CVE IDs from Github before we unembargoed, but we haven't received any response in most cases, so we fell back to requesting CVE IDs from other CNAs (variously MITRE and Red Hat). CVE-2026-90616 CVE ID requested from MITRE, pending request ref.

Read the full article at oss-security →