GitHub's been doing CVE requests since at least 2022

https://github.blog/security/vulnerability-research/removing...