Critical vulnerability in Hoppscotch - CVE assigned but CVE record not published

[infycore]

"GitHub has issued CVE-2026-50160 for this Security Advisory after reviewing it for compliance with CVE rules. Once your Security Advisory is published, we'll publish the CVE record to the CVE List. At that time, if your package is in a supported ecosystem, we'll also publish an advisory in the global GitHub Advisory Database and send security alerts to affected repositories."

Got this comment on this advisory

It has been couple weeks since the advisory has been published but the CVE record is still not published. Kindly help.

[taladrane]

hi @infycore 👋 thanks for your patience! good news - CVE-2026-50160 has been published on the CVE List and is visible on cve.org. we recently published a blog post explaining why some CVEs have been taking longer than usual to move through our pipeline and what we're doing about it: Inside the Advisory Database and what happens when vulnerability volume breaks records.

since the CVE record is now published, I'll go ahead and close this issue. please feel free to reopen it (or file a new one) if you notice anything else that looks off. thanks again for reporting! 🙌

[infycore]

Thanks, appreciate it!