Request a CVE ID for GHSA-x29c-9gmg-f685

[jankesec]

Hi, thanks for publishing GHSA-x29c-9gmg-f685 (HTML email preview auto-loads remote resources) after my report. It still shows "No known CVE". If you already requested one, there is nothing more to do, since GitHub's CVE queue has been taking several weeks lately. If not, requesting one needs admin rights on the advisory, so it has to come from a maintainer (there is a "Request CVE" option on the advisory page, or gh api -X POST repos/flyfish-dev/file-viewer/security-advisories/GHSA-x29c-9gmg-f685/cve if that is easier). Would you be willing to request one when you have a moment? Happy to help if GitHub's team has questions.