oss-sec mailing list archives

Re: How to request CVE numbers?


From: Hauke Mehrtens <hauke () hauke-m de>
Date: Thu, 11 Jun 2026 01:27:40 +0200

On 6/10/26 16:14, Lucas Holt wrote:
On 6/10/26 8:52 AM, Christian Brabandt wrote:
Agree, but they seemed to be swamped by CVE requests for the last couple
of months. I have been waiting for up to 3 weeks on the final CVE
assignment.

I've also had delays getting them, but  consider all the AI related reports.  We submitted 13 requests for mport package manager recently.


Lucas Holt
Luke () FoolishGames com
________________________________________________________
MidnightBSD.org (Free OS)
JustJournal.com (Free blogging)

Thank you all for the help.

We requested CVE numbers on github about 1 week ago here:
https://github.com/openwrt/odhcpd/security/advisories/

We will probably patch the vulnerabilities and also publish them before we have CVE numbers assigned and just update the advisory later.

Hauke


Current thread: