The script ./wsa check generates CVE metadata that looks like this, including a comment pointing to the relevant Apple security advisory:
CVE-2026-28917: # https://support.apple.com/en-us/104191
bugzilla: 310527
author: Vitaly Simonovich
impact: Processing maliciously crafted web content may lead to an unexpected
process crash.
description: The issue was addressed with improved input validation.
However, the comment is wrong. It's always the same irrelevant support article 104191 for every CVE. Looks like this has been broken since WSA-2024-0006. Metadata older than that does not include the comment at all.
The script
./wsa checkgenerates CVE metadata that looks like this, including a comment pointing to the relevant Apple security advisory:However, the comment is wrong. It's always the same irrelevant support article 104191 for every CVE. Looks like this has been broken since WSA-2024-0006. Metadata older than that does not include the comment at all.