Question about CVE-2026-0637 being referenced in two different advisories

[841r0g]

Hi Team,

I noticed what seems to be an inconsistency regarding CVE-2026-0637 in your security advisories documentation.

The same CVE appears in these two advisories:

• https://github.com/wso2/docs-security/blob/main/en/docs/security-announcements/security-advisories/2026/WSO2-2025-4829.md
• https://github.com/wso2/docs-security/blob/main/en/docs/security-announcements/security-advisories/2026/WSO2-2025-4897.md

From my reading, these advisories do not appear to describe the same vulnerability, yet they both reference CVE-2026-0637.

Could you please clarify:

1. Whether CVE-2026-0637 is correctly assigned in both advisories;
2. If one of the references is a typo or copy/paste error;
3. Which advisory should be considered the canonical reference for this CVE.

Thank you for your help and for maintaining these security announcements.