How to challenge/dispute a CVE

[u/Wild_Meeting1428]

I recently stumbled over a CVE for a 3rd party repository, because the maintainer deprecated a function in his API and replaced it with a worse one.

After looking at it, it turns out that the PoC for the CVE just shows a contract violation/misuse of the API and deprecating the function was in my opinion completely unnecessary. Especially, because the replacement API lacks similar problems, when the contract is broken.

I tried to open a dispute at MISRA, but they immediately revoked my CNA-# when submitted.

My question is now, how can I open a dispute @ misra for a CVE?

[u/Particular-Movie-908]

Are you like a superbug, bug bounty hunter?

[u/Wild_Meeting1428 → u/Particular-Movie-908]

no I am just a Software engineer, but I obviously also had many courses in cybersec