Issues

• complex error response for RESERVED in cveMetadata.state

  CVEProject/cve-services#2030 · Filter by author ElectricNroff opened on Sep 28, 2026
  1

• POST /cve/:id/reject deletes some properties

  CVEProject/cve-services#2029 · Filter by author ElectricNroff opened on Sep 28, 2026
  1

• server result differs from validation library (time-varying validity)

  CVEProject/cve-services#2028 · Filter by author ElectricNroff opened on Sep 28, 2026
  1

• Notifications

  draftuser story
  CVEProject/cve-services#2020 · Filter by author david-rocca opened on Sep 21, 2026 · Services - 2.8.7
  

• Investigate fail open on audit log failure to write.

  CVEProject/cve-services#1985 · Filter by author david-rocca opened on Aug 28, 2026 · Services - 2.8.7

• Remove __v from GET /api/registry/users

  CVEProject/cve-services#1984 · Filter by author david-rocca opened on Aug 28, 2026 · Services - 2.8.7

• Update contribution guide & issue / PR templates.

  CVEProject/cve-services#1980 · Filter by author david-rocca opened on Aug 27, 2026 · Services - 2.8.7

• (icebox) Services secretariat only report endpoint.

  CVEProject/cve-services#1963 · Filter by author jdalphond-mitre opened on Aug 11, 2026
  

• Migrate legacy User compatibility to a BaseUser-backed mask

  CVEProject/cve-services#1943 · Filter by author david-rocca opened on Jul 23, 2026 · Services - 2.8.7
  

• Migrate legacy Org compatibility to a BaseOrg-backed mask

  CVEProject/cve-services#1942 · Filter by author david-rocca opened on Jul 23, 2026 · Services - 2.8.7
  

• Standardize legacy/registry format selection in repository APIs

  CVEProject/cve-services#1936 · Filter by author david-rocca opened on Jul 20, 2026 · Services - 2.8.7

• AJV strict-mode warnings in tests

  CVEProject/cve-services#1927 · Filter by author david-rocca opened on Jul 13, 2026

• Generated/local artifacts are present in the workspace

  CVEProject/cve-services#1926 · Filter by author david-rocca opened on Jul 13, 2026 · Services - 2.8.7
  

• Registry org create/update carries too many responsibilities

  CVEProject/cve-services#1925 · Filter by author david-rocca opened on Jul 13, 2026

• Legacy role checks perform broad scans instead of direct role lookups

  CVEProject/cve-services#1924 · Filter by author david-rocca opened on Jul 13, 2026 · Services - 2.8.7

• Runtime dependencies include dev tooling and known moderate advisories

  CVEProject/cve-services#1923 · Filter by author david-rocca opened on Jul 13, 2026 · Services - 2.8.7

• Unused package candidates from depcheck

  CVEProject/cve-services#1922 · Filter by author david-rocca opened on Jul 13, 2026 · Services - 2.8.7

• Unused middleware exports and placeholder functions

  CVEProject/cve-services#1921 · Filter by author david-rocca opened on Jul 13, 2026

• Empty repository file is not referenced

  CVEProject/cve-services#1920 · Filter by author david-rocca opened on Jul 13, 2026

• Deployment environment names drift between Docker, npm scripts, and config

  CVEProject/cve-services#1919 · Filter by author david-rocca opened on Jul 13, 2026

• Docker build context can include ignored local secrets and generated artifacts

  CVEProject/cve-services#1917 · Filter by author david-rocca opened on Jul 13, 2026

• TypeError in findOneByShortNameWithSelect because of calling a method on a class

  CVEProject/cve-services#1903 · Filter by author ElectricNroff opened on Jul 2, 2026

• authContext.js hasOwnMethod calls always return false

  CVEProject/cve-services#1902 · Filter by author ElectricNroff opened on Jul 2, 2026

• incorrect getUserUUID arguments

  CVEProject/cve-services#1901 · Filter by author ElectricNroff opened on Jul 2, 2026

• Org GET responses can include stale schema fields that fail subsequent PUT validation

  CVEProject/cve-services#1846 · Filter by author jdalphond-mitre opened on Jun 10, 2026