OpenClaw Advisory Surge Highlights Blind Spot Between GitHub and CVE Vulnerability Tracking

OpenClaw’s rapid publication of ~255 GitHub Security Advisories revealed a systemic gap between GHSA convenience and CVE‑centric tooling: many advisories lack CVE identifiers, prompting debate (including a DIBS request) and highlighting GitHub’s large unreviewed advisory backlog. The piece outlines risks that CVE‑only enterprise scanners may miss GHSA‑only disclosures, describes independent tracking efforts to reconcile records, and frames this as a broader disclosure and tooling challenge rather than evidence of active exploitation.