CVE not assigned for published advisory GHSA-fhp4-pr5j-46m5 (julianhille/MuhammaraJS)

[r3d5t0x3]

Advisory: GHSA-fhp4-pr5j-46m5

This GitHub-reviewed advisory was published on May 23, 2026, and the maintainer
(@julianhille) requested a CVE ID on Aug 25, 2026. As of today it still has no CVE
assigned — about 6 weeks after the request.

Could you please check the status of this CVE request and assign a CVE ID?

• Package: muhammara (npm)
• Severity: High (CVSS 7.5)
• Affected: <= 6.0.4, patched in 6.0.6
• Reporter/credit: r3d5t0x3

Thank you.

[julianhille]

Re requested:

[r3d5t0x3]

Thanks for re-requesting. Appreciate it, I'll keep the advisory-database
issue open so GitHub can process the assignment.

Re requested: