Product added

What a record said when it was published, what it says now, and the commit that changed it.

34 changes · newest first · grouped by dayCSV JSON RSS

Counted changes of "Product added" published by GitHub_M, newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on.	Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Thu 13 Aug 2026· 1 change
2026-08-13	CVE-2026-73666	openchoreo GitHub_M	not named as affected at publication, now names backstage-plugins	Time to revision 0 days
Tue 4 Aug 2026· 1 change
2026-08-04	CVE-2026-40181	remix-run GitHub_M	not named as affected at publication, now names @remix-run/router	Time to revision 63 days
Tue 2 Jun 2026· 1 change
2026-06-02	CVE-2026-22029	remix-run GitHub_M	not named as affected at publication, now names @remix-run/router	Time to revision 144 days
Wed 20 May 2026· 1 change
2026-05-20	CVE-2024-49767	pallets GitHub_M	not named as affected at publication, now names quart	Time to revision 572 days
Wed 22 Apr 2026· 1 change
2026-04-22	CVE-2026-33471	nimiq GitHub_M	not named as affected at publication, now names nimiq-block	Time to revision 0 days
Mon 30 Mar 2026· 1 change
2026-03-30	CVE-2026-33634	team-telnyx GitHub_M	not named as affected at publication, now names telnyx	Time to revision 7 days
Wed 25 Mar 2026· 1 change
2026-03-25	CVE-2026-33634	berriai GitHub_M	not named as affected at publication, now names litellm	Time to revision 2 days
Mon 23 Mar 2026· 4 changes
2026-03-23	CVE-2026-33167	rails GitHub_M	not named as affected at publication, now names actionpack	Time to revision 0 days
2026-03-23	CVE-2026-33168	rails GitHub_M	not named as affected at publication, now names actionview	Time to revision 0 days
2026-03-23	Show all 2 CVE records in this change: Product added: activesupport named as affected from railsHide the 2 CVE records in this change: Product added: activesupport named as affected from rails	rails GitHub_M	not named as affected at publication, now names activesupport	Time to revision 0 days
2026-03-23	CVE-2026-33169	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-03-23	CVE-2026-33170	same vendor as the line above	same change as the line above	Time to revision 0 days
Fri 13 Feb 2026· 16 changes
2026-02-133 commits	Show all 16 CVE records in this change: Product added: 9 products named as affected from freepbxHide the 16 CVE records in this change: Product added: 9 products named as affected from freepbx	freepbx GitHub_M	not named as affected at publication, now names endpointman and 8 moreBranches and original-value intervals are stated on each row.	Time to revision 60 to 500 days
2026-02-13	CVE-2025-61678	same vendor as the line above	not named as affected at publication, now names endpointman	Time to revision 122 days
2026-02-13	CVE-2025-62173	same vendor as the line above	not named as affected at publication, now names restapps	Time to revision 72 days
2026-02-13	CVE-2025-64328	same vendor as the line above	not named as affected at publication, now names filestore	Time to revision 99 days
2026-02-13	CVE-2025-66039	same vendor as the line above	not named as affected at publication, now names framework	Time to revision 66 days
2026-02-13	CVE-2025-67513	same vendor as the line above	not named as affected at publication, now names endpoint	Time to revision 65 days
2026-02-13	CVE-2025-67722	same vendor as the line above	not named as affected at publication, now names framework	Time to revision 60 days
2026-02-13	CVE-2025-67736	same vendor as the line above	not named as affected at publication, now names tts	Time to revision 60 days
2026-02-13	CVE-2025-55209	same vendor as the line above	not named as affected at publication, now names contactmanager	Time to revision 162 days
8 more rows in this change are not listed here. Open all 16 rows →
Thu 12 Feb 2026· 1 change
2026-02-12	CVE-2026-26185	directus GitHub_M	not named as affected at publication, now names @directus/api	Time to revision 0 days
Wed 3 Jul 2024· 1 change
2024-07-03	CVE-2024-38519	ytdl-org GitHub_M	not named as affected at publication, now names youtube-dl	Time to revision 1 days
Sat 17 Feb 2024· 2 changes
2024-02-17	CVE-2024-24762	encode GitHub_M	not named as affected at publication, now names starlette	Time to revision 12 days
2024-02-17	CVE-2024-24762	kludex GitHub_M	not named as affected at publication, now names python-multipart	Time to revision 12 days
Fri 15 Sep 2023· 1 change
2023-09-15	CVE-2023-37905	typo3 GitHub_M	not named as affected at publication, now names cms-rte-ckeditor	Time to revision 56 days
Wed 17 May 2023· 1 change
2023-05-17	CVE-2023-27482	home-assistant GitHub_M	not named as affected at publication, now names supervisor	Time to revision 71 days
Wed 10 May 2023· 1 change
2023-05-10	CVE-2023-25568	ipfs GitHub_M	not named as affected at publication, now names boxo	Time to revision 1 days

This kind is counted once per record and per product, so one record that added four products counts four times and the number of records behind these changes is smaller. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

4,561 record edits in the 52 weeks to 2026-09-07. Scroll for earlier dates.fewermore

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →