Request a CVE for the published advisory GHSA-wj5c-88hg-5926 #1059

Hi — first, thanks for the fast turnaround: confirming the missing authorization, reproducing it with a viewer token, fixing it in v12.3.1 and publishing the advisory.

One follow-up: since the advisory is published and GitHub is the CNA for this repository, could you request a CVE for it from the advisory page (CVE ID → Request CVE)? The advisory already carries everything the review needs — CWE-862, CVSS v3.1 8.1, affected <= 12.3.0, patched 12.3.1 — and GitHub states the review takes up to three working days.

Advisory: GHSA-wj5c-88hg-5926

Happy to supply anything else that would help the request.

Thanks,
Roy AuYeung