GHSA-cqhr-jqvc-qw9p has an invalid CVE id and appears to be a duplicate of GHSA-g66q-grxc-64j3

[warkentyne]

GHSA-cqhr-jqvc-qw9p has the CVE id CVE-2016-1000273 but this id does not exist at NVD. On the other hand, the vulnerability appears to be the same as GHSA-g66q-grxc-64j3 although the severity is different and the latter is missing the fix version.

[darakian]

Hi @warkentyne, I think you'll need to reach out to the cve org to see about that cve id.
https://cveform.mitre.org/