Are vulnerabilities detected in the development branch eligible for CVEs?

Hello everyone!

I am a user who has reported different vulnerabilities in Pi-Hole over the last year.

Last time, you suggested me to inquire about the development version as it had big changes compared to the current one and will soon be discontinued.

Are the new vulnerabilities I detect in the development version eligible for CVEs?

Thank you very much!

We'd be happy to iron out any flaws before releasing v6, but filing a CVE may prove difficult, as there would be no reliable release tag to report it against.

I'll ask the dev team about the best procedure.

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.