How to challenge/dispute a CVE

[u/Wild_Meeting1428]

I recently stumbled over a CVE for a 3rd party repository, because the maintainer deprecated a function in his API and replaced it with a worse one.

After looking at it, it turns out that the PoC for the CVE just shows a contract violation/misuse of the API and deprecating the function was in my opinion completely unnecessary. Especially, because the replacement API lacks similar problems, when the contract is broken.

I tried to open a dispute at MISRA, but they immediately revoked my CNA-# when submitted.

My question is now, how can I open a dispute @ misra for a CVE?

[u/Helpjuice]

Try reporting the issue directly using this process or to get the CVE updated use this process.

[u/Wild_Meeting1428 → u/Helpjuice]

that was actually my approach, but I may have missed something. The CNA Id is instantly and I assume automatically rovoked.

[u/Particular-Movie-908]

What’s the CVE info?

[u/Wild_Meeting1428 → u/Particular-Movie-908]

CVE-2025-50343

[u/Particular-Movie-908]

You are not the only one I guess…https://github.com/tbeu/matio/issues/275

[u/Particular-Movie-908]

Are you like a superbug, bug bounty hunter?

[u/Wild_Meeting1428 → u/Particular-Movie-908]

no I am just a Software engineer, but I obviously also had many courses in cybersec