Published vulnerability report. The official CVE record credits dpfkdlemtp as Reporter.
- Official CVE record
- Published GitHub security advisory (GHSA-9g6v-r3xf-673q)
- CVE portfolio on my GitHub profile
GitHub staff declined to assign a second CVE to this GHSA, identifying the request as a duplicate of the already published CVE-2026-100633. The existing CVE was assigned by VulnCheck, references this GHSA, and credits dpfkdlemtp as reporter. The GHSA CVE field currently says “No known CVE”; it has not yet been linked to the existing record.
This repository is an index of public records, not a new disclosure. It contains no private report material or exploit code.