# Copyright 2021 The Go Authors. All rights reserved.
# Use of this source code is governed by a BSD-style
# license that can be found in the LICENSE file.

name: Missing CVE or GHSA
description: |
  Report a CVE or GHSA that is missing from our database.
title: "x/vulndb: potential Go vuln in <package>: <CVE ID>, <GHSA ID>"
labels: ["Needs Triage","Direct External Report"]
body:
  - type: markdown
    attributes:
      value: |
        Use this form to let us know about a public CVE or GHSA that is missing from our database.

        ❗ To report undisclosed Go vulnerabilities, please follow our [security policy](https://go.dev/security/policy) instead.

        For questions or concerns, do not hesitate to reach out to us directly at security@golang.org.
  - type: input
    id: cve
    attributes:
      label: CVE ID
      placeholder: CVE-20XX-NNNN
    validations:
      required: false
  - type: input
    id: ghsa
    attributes:
      label: GHSA ID
      placeholder: GHSA-xxxx-yyyy-zzzz
    validations:
      required: false
  - type: textarea
    attributes:
      label: Additional information
      description: |
        Anything else you'd like us to know about this vulnerability?
    validations:
      required: false