Issues

• Use organization UUIDs for CVE-ID reservation locking and ownership

  CVEProject/cve-services#2080 · Filter by author david-rocca opened on Nov 2, 2026 · 2.9.X

• Root - Read implementation

  CVEProject/cve-services#2062 · Filter by author david-rocca opened on Oct 21, 2026 · 2.10.0
  

• Remove tl_root_start_date.

  CVEProject/cve-services#2057 · Filter by author jdalphond-mitre opened on Oct 19, 2026 · 2.9.2

• REDACTED code in getFilteredCveId can be bypassed via other endpoints

  CVEProject/cve-services#2056 · Filter by author ElectricNroff opened on Oct 16, 2026 · 2.9.2

• complex error response for RESERVED in cveMetadata.state

  CVEProject/cve-services#2030 · Filter by author ElectricNroff opened on Sep 28, 2026
  1

• POST /cve/:id/reject deletes some properties

  CVEProject/cve-services#2029 · Filter by author ElectricNroff opened on Sep 28, 2026 · 2.9.2
  1

• Investigate fail open on audit log failure to write.

  CVEProject/cve-services#1985 · Filter by author david-rocca opened on Aug 28, 2026 · 2.9.2

• Update contribution guide & issue / PR templates.

  CVEProject/cve-services#1980 · Filter by author david-rocca opened on Aug 27, 2026

• (icebox) Services secretariat only report endpoint.

  CVEProject/cve-services#1963 · Filter by author jdalphond-mitre opened on Aug 11, 2026
  

• AJV strict-mode warnings in tests

  CVEProject/cve-services#1927 · Filter by author david-rocca opened on Jul 13, 2026

• Registry org create/update carries too many responsibilities

  CVEProject/cve-services#1925 · Filter by author david-rocca opened on Jul 13, 2026

• Runtime dependencies include dev tooling and known moderate advisories

  CVEProject/cve-services#1923 · Filter by author david-rocca opened on Jul 13, 2026 · 2.9.2

• Unused package candidates from depcheck

  CVEProject/cve-services#1922 · Filter by author david-rocca opened on Jul 13, 2026 · 2.9.2

• Empty repository file is not referenced

  CVEProject/cve-services#1920 · Filter by author david-rocca opened on Jul 13, 2026

• Deployment environment names drift between Docker, npm scripts, and config

  CVEProject/cve-services#1919 · Filter by author david-rocca opened on Jul 13, 2026

• Docker build context can include ignored local secrets and generated artifacts

  CVEProject/cve-services#1917 · Filter by author david-rocca opened on Jul 13, 2026 · 2.9.2

• TypeError in findOneByShortNameWithSelect because of calling a method on a class

  CVEProject/cve-services#1903 · Filter by author ElectricNroff opened on Jul 2, 2026

• authContext.js hasOwnMethod calls always return false

  CVEProject/cve-services#1902 · Filter by author ElectricNroff opened on Jul 2, 2026

• incorrect getUserUUID arguments

  CVEProject/cve-services#1901 · Filter by author ElectricNroff opened on Jul 2, 2026

• Org GET responses can include stale schema fields that fail subsequent PUT validation

  CVEProject/cve-services#1846 · Filter by author jdalphond-mitre opened on Jun 10, 2026

• in getFilteredCveId, getAllOrgs and getAllUsers can be too slow

  CVEProject/cve-services#1843 · Filter by author ElectricNroff opened on Jun 8, 2026

• As a API User, what fields should be returned and editable for an org that became a secretariat.

  draftuser story
  CVEProject/cve-services#1749 · Filter by author jdalphond-mitre opened on Apr 14, 2026

• missing documentation of trimJSONWhitespace interaction with response code

  CVEProject/cve-services#1654 · Filter by author ElectricNroff opened on Mar 2, 2026 · 2.9.X

• nonSequentialReservation 206 error has stray argument

  CVEProject/cve-services#1631 · Filter by author ElectricNroff opened on Feb 13, 2026

• cleanOutputSequential does not clean anything

  CVEProject/cve-services#1630 · Filter by author ElectricNroff opened on Feb 13, 2026