Package added to advisory

What a record said when it was published, what it says now, and the commit that changed it.

327 advisory changes refused · newest first · grouped by day

These rows are not counted anywhere on this site. Checked and refused means we compared this change and then rejected it: the false positive filter for this kind of change judged it to be a false positive rather than a real change. The row is shown so you can check the filter and disagree with us, and it is counted in no figure on this site. No advisory change is here: the advisory engine counts the 2,291 version pairs its filters refused by class rather than writing them out one by one, so this view holds CVE and KEV changes only.

Rows we checked and refused, counted nowhere of "Package added to advisory", newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Advisory, Which advisory was edited, by its GHSA id.	Package, The package the advisory names, and the registry it comes from.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 2 Sep 2026· 1 change
2026-09-02published 2026-06-16	GHSA-9cr8-q42q-g8m7CVE-2026-53622	go high	not named as affected when the advisory was published, now names github.com/traefik/traefik/v3	Time to revision 78 days
Wed 15 Jul 2026· 1 change
2026-07-15published 2026-05-28	GHSA-995v-fvrw-c78mCVE-2026-45287	go low	not named as affected when the advisory was published, now names go.opentelemetry.io/otel/schema	Time to revision 48 days
Fri 10 Jul 2026· 1 change
2026-07-10published 2026-07-10	GHSA-hvr9-72v2-fff3CVE-2026-54069	go critical	not named as affected when the advisory was published, now names github.com/siyuan-note/siyuan/kernel	Time to revision 0 days
Tue 7 Jul 2026· 13 changes
2026-07-07published 2026-06-25	Show all 13 advisories in this change: Package added to advisory: golang.org/x/crypto named as affected in goHide the 13 advisories in this change: Package added to advisory: golang.org/x/crypto named as affected in go	go 3 bands	not named as affected when the advisory was published, now names golang.org/x/crypto	Time to revision 12 days
2026-07-07published 2026-06-25	GHSA-x527-x647-q7ggCVE-2026-46595	same package registry as the line abovecritical	same change as the line above	Time to revision 12 days
2026-07-07published 2026-06-25	GHSA-5cgq-3rg8-m6cvCVE-2026-42508	same package registry as the line abovecritical	same change as the line above	Time to revision 12 days
2026-07-07published 2026-06-25	GHSA-rm3j-f69w-wqmqCVE-2026-39834	same package registry as the line abovecritical	same change as the line above	Time to revision 12 days
2026-07-07published 2026-06-25	GHSA-89gr-r52h-f8rxCVE-2026-39831	same package registry as the line abovecritical	same change as the line above	Time to revision 12 days
2026-07-07published 2026-06-25	GHSA-w879-237q-wc7rCVE-2026-39829	same package registry as the line abovehigh	same change as the line above	Time to revision 12 days
2026-07-07published 2026-06-25	GHSA-vgwf-h737-ff37CVE-2026-39830	same package registry as the line abovecritical	same change as the line above	Time to revision 12 days
2026-07-07published 2026-06-25	GHSA-f5wc-c3c7-36mcCVE-2026-39832	same package registry as the line abovecritical	same change as the line above	Time to revision 12 days
2026-07-07published 2026-06-25	GHSA-jppx-rxg9-jmrxCVE-2026-39833	same package registry as the line abovecritical	same change as the line above	Time to revision 12 days
5 more rows in this change are not listed here. Open all 13 rows →
Fri 26 Jun 2026· 1 change
2026-06-26published 2026-04-07	GHSA-xgrm-4fwx-7qm8CVE-2026-33815	go critical	not named as affected when the advisory was published, now names github.com/jackc/pgx/v5	Time to revision 80 days
Thu 18 Jun 2026· 1 change
2026-06-18published 2026-01-14	GHSA-mqqf-5wvp-8fh8CVE-2025-69725	go moderate	not named as affected when the advisory was published, now names github.com/go-chi/chi/v5	Time to revision 155 days
Mon 8 Jun 2026· 3 changes
2026-06-08published 2026-03-17	GHSA-2cpp-j2fc-qhp7CVE-2026-4270	pypi moderate	not named as affected when the advisory was published, now names awslabs-aws-api-mcp-server	Time to revision 83 days
2026-06-08published 2026-05-12	GHSA-2g4x-fq3j-cgq4CVE-2026-45090	go high	not named as affected when the advisory was published, now names github.com/hahwul/dalfox	Time to revision 27 days
2026-06-08published 2026-03-02	GHSA-43gx-6gv6-3jcpCVE-2026-28413	pypi moderate	not named as affected when the advisory was published, now names products-isurlinportal	Time to revision 98 days
Thu 14 May 2026· 1 change
2026-05-14published 2026-05-14	GHSA-mxmp-wr3w-rvqxCVE-2026-46356	go moderate	not named as affected when the advisory was published, now names github.com/fleetdm/fleet/v4	Time to revision 0 days
Tue 5 May 2026· 1 change
2026-05-05published 2026-04-07	GHSA-mh2q-q3fh-2475CVE-2026-29181	go high	not named as affected when the advisory was published, now names go.opentelemetry.io/otel	Time to revision 28 days
Mon 30 Mar 2026· 1 change
2026-03-30published 2026-03-03	GHSA-5mx2-2mgw-x8rmCVE-2026-32896	npm moderate	not named as affected when the advisory was published, now names openclaw	Time to revision 27 days
Fri 27 Mar 2026· 14 changes
2026-03-27published 2026-03-13 to 2026-03-25	Show all 14 advisories in this change: Package added to advisory: 3 packages named as affected in goHide the 14 advisories in this change: Package added to advisory: 3 packages named as affected in go	go 4 bands	not named as affected when the advisory was published, now names github.com/nats-io/nats-server and 2 more	Time to revision 2 to 14 days
2026-03-27published 2026-03-25	GHSA-pq2q-rcw4-3hr6CVE-2026-27889	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/nats-io/nats-server	Time to revision 2 days
2026-03-27published 2026-03-24	GHSA-3f24-pcvm-5jqcCVE-2026-33248	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/nats-io/nats-server	Time to revision 3 days
2026-03-27published 2026-03-24	GHSA-55h8-8g96-x4hjCVE-2026-33246	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/nats-io/nats-server	Time to revision 3 days
2026-03-27published 2026-03-24	GHSA-pwx7-fx9r-hr4hCVE-2026-33223	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/nats-io/nats-server	Time to revision 3 days
2026-03-27published 2026-03-24	GHSA-9983-vrx2-fg9cCVE-2026-33222	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/nats-io/nats-server	Time to revision 3 days
2026-03-27published 2026-03-24	GHSA-8r68-gvr4-jh7jCVE-2026-33219	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/nats-io/nats-server	Time to revision 3 days
2026-03-27published 2026-03-24	GHSA-vprv-35vv-q339CVE-2026-33218	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/nats-io/nats-server	Time to revision 3 days
2026-03-27published 2026-03-24	GHSA-jxxm-27vp-c3m5CVE-2026-33217	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/nats-io/nats-server	Time to revision 3 days
6 more rows in this change are not listed here. Open all 14 rows →
Tue 24 Mar 2026· 1 change
2026-03-24published 2026-03-20	GHSA-r9w3-57w2-gch2CVE-2026-33504	go high	not named as affected when the advisory was published, now names github.com/ory/hydra/v2	Time to revision 4 days
Fri 13 Mar 2026· 1 change
2026-03-13published 2026-03-11	GHSA-8q2w-wr49-whqjCVE-2026-29777	go moderate	not named as affected when the advisory was published, now names github.com/traefik/traefik	Time to revision 2 days
Fri 27 Feb 2026· 6 changes
2026-02-27published 2026-02-02	GHSA-9h8m-3fm2-qjrqCVE-2026-24051	go high	not named as affected when the advisory was published, now names go.opentelemetry.io/otel/sdk	Time to revision 25 days
2026-02-27published 2026-02-24	Show all 5 advisories in this change: Package added to advisory: github.com/caddyserver/caddy/v2 named as affected in goHide the 5 advisories in this change: Package added to advisory: github.com/caddyserver/caddy/v2 named as affected in go	go 2 bands	not named as affected when the advisory was published, now names github.com/caddyserver/caddy/v2	Time to revision 3 days
2026-02-27published 2026-02-24	GHSA-5r3v-vc8m-m96gCVE-2026-27590	same package registry as the line abovehigh	same change as the line above	Time to revision 3 days
2026-02-27published 2026-02-24	GHSA-x76f-jf84-rqj8CVE-2026-27588	same package registry as the line abovehigh	same change as the line above	Time to revision 3 days
2026-02-27published 2026-02-24	GHSA-g7pc-pc7g-h8jhCVE-2026-27587	same package registry as the line abovehigh	same change as the line above	Time to revision 3 days
2026-02-27published 2026-02-24	GHSA-hffm-g8v7-wrv7CVE-2026-27586	same package registry as the line abovehigh	same change as the line above	Time to revision 3 days
2026-02-27published 2026-02-24	GHSA-4xrr-hq4w-6vf4CVE-2026-27585	same package registry as the line abovemoderate	same change as the line above	Time to revision 3 days
Thu 11 Dec 2025· 1 change
2025-12-11published 2025-10-10	GHSA-rwvp-r38j-9rggCVE-2025-11579	go moderate	not named as affected when the advisory was published, now names github.com/nwaples/rardecode	Time to revision 62 days
Tue 4 Nov 2025· 2 changes
2025-11-04published 2025-10-29	Show all 2 advisories in this change: Package added to advisory: github.com/zitadel/zitadel named as affected in goHide the 2 advisories in this change: Package added to advisory: github.com/zitadel/zitadel named as affected in go	go high	not named as affected when the advisory was published, now names github.com/zitadel/zitadel	Time to revision 6 days
2025-11-04published 2025-10-29	GHSA-cfjq-28r2-4jv5CVE-2025-64103	same package registry as the line abovehigh	same change as the line above	Time to revision 6 days
2025-11-04published 2025-10-29	GHSA-xrw9-r35x-x878CVE-2025-64102	same package registry as the line abovehigh	same change as the line above	Time to revision 6 days
Fri 29 Aug 2025· 12 changes
2025-08-29published 2025-08-21	Show all 6 advisories in this change: Package added to advisory: 2 packages named as affected in goHide the 6 advisories in this change: Package added to advisory: 2 packages named as affected in go12 rows, one per advisory and package	go 2 bands	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5 and 1 more	Time to revision 8 to 9 days
2025-08-29published 2025-08-21	GHSA-h469-4fcf-p23hCVE-2025-8402	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 8 days
2025-08-29published 2025-08-21	GHSA-h469-4fcf-p23hCVE-2025-8402	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v6	Time to revision 8 days
2025-08-29published 2025-08-21	GHSA-x67c-v8jr-p29rCVE-2025-8023	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 9 days
2025-08-29published 2025-08-21	GHSA-x67c-v8jr-p29rCVE-2025-8023	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v6	Time to revision 9 days
2025-08-29published 2025-08-21	GHSA-4276-cm8c-788hCVE-2025-53971	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 9 days
2025-08-29published 2025-08-21	GHSA-4276-cm8c-788hCVE-2025-53971	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v6	Time to revision 9 days
2025-08-29published 2025-08-21	GHSA-q453-638c-h4mrCVE-2025-49222	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 9 days
2025-08-29published 2025-08-21	GHSA-q453-638c-h4mrCVE-2025-49222	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v6	Time to revision 9 days
4 more rows in this change are not listed here. Open all 12 rows →
Tue 12 Aug 2025· 1 change
2025-08-12published 2025-06-26	GHSA-prpj-rchp-9j5hCVE-2025-52894	go moderate	not named as affected when the advisory was published, now names github.com/openbao/openbao	Time to revision 47 days
Tue 29 Jul 2025· 5 changes
2025-07-29published 2025-06-30	GHSA-56j4-446m-qrf6	go high	not named as affected when the advisory was published, now names github.com/babylonlabs-io/babylon	Time to revision 29 days
2025-07-29published 2025-07-24	GHSA-526j-mv3p-f4vvCVE-2025-54379	go high	not named as affected when the advisory was published, now names github.com/lf-edge/ekuiper	Time to revision 5 days
2025-07-29published 2025-07-16	Show all 2 advisories in this change: Package added to advisory: github.com/filebrowser/filebrowser/v2 named as affected in goHide the 2 advisories in this change: Package added to advisory: github.com/filebrowser/filebrowser/v2 named as affected in go	go high	not named as affected when the advisory was published, now names github.com/filebrowser/filebrowser/v2	Time to revision 13 days
2025-07-29published 2025-07-16	GHSA-7xqm-7738-642xCVE-2025-53893	same package registry as the line abovehigh	same change as the line above	Time to revision 13 days
2025-07-29published 2025-07-16	GHSA-7xwp-2cpp-p8r7CVE-2025-53826	same package registry as the line abovehigh	same change as the line above	Time to revision 13 days
2025-07-29published 2025-06-26	GHSA-8f5r-8cmq-7fmqCVE-2025-52893	go moderate	not named as affected when the advisory was published, now names github.com/openbao/openbao/sdk/v2	Time to revision 33 days
Tue 22 Jul 2025· 1 change
2025-07-22published 2023-11-06	GHSA-r67m-mf7v-qp7jCVE-2023-5968	go moderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server	Time to revision 624 days
Wed 9 Jul 2025· 3 changes
2025-07-09published 2024-08-01	Show all 3 advisories in this change: Package added to advisory: github.com/mattermost/mattermost named as affected in goHide the 3 advisories in this change: Package added to advisory: github.com/mattermost/mattermost named as affected in go	go 2 bands	not named as affected when the advisory was published, now names github.com/mattermost/mattermost	Time to revision 342 to 342 days
2025-07-09published 2024-08-01	GHSA-vg67-chm7-8m3jCVE-2024-41144	same package registry as the line abovehigh	same change as the line above	Time to revision 342 days
2025-07-09published 2024-08-01	GHSA-9fpw-c9x7-cv3jCVE-2024-41926	same package registry as the line abovemoderate	same change as the line above	Time to revision 342 days
2025-07-09published 2024-08-01	GHSA-jr9x-3x7m-4j75CVE-2024-41162	same package registry as the line abovemoderate	same change as the line above	Time to revision 342 days
Wed 25 Jun 2025· 1 change
2025-06-25published 2025-06-12	GHSA-h4h6-vccr-44h2CVE-2024-44906	go moderate	not named as affected when the advisory was published, now names github.com/uptrace/bun/driver/pgdriver	Time to revision 13 days
Tue 24 Jun 2025· 1 change
2025-06-24published 2023-08-23	GHSA-c8xw-vjgf-94hrCVE-2023-40025	go high	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd/v2	Time to revision 671 days
Thu 15 May 2025· 1 change
2025-05-15published 2025-03-19	GHSA-wq9g-9vfc-cfq9CVE-2025-30153	go high	not named as affected when the advisory was published, now names github.com/getkin/kin-openapi	Time to revision 57 days
Wed 14 May 2025· 1 change
2025-05-14published 2023-11-03	GHSA-r6cc-7wj7-gfx2CVE-2023-3893	go high	not named as affected when the advisory was published, now names github.com/kubernetes-csi/csi-proxy/v2	Time to revision 558 days
Tue 13 May 2025· 1 change
2025-05-13published 2023-01-25	GHSA-6p4m-hw2h-6gmwCVE-2023-22736	go high	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd/v2	Time to revision 839 days
Mon 5 May 2025· 1 change
2025-05-05published 2025-05-01	GHSA-6m8w-jc87-6cr7CVE-2025-46569	go high	not named as affected when the advisory was published, now names github.com/open-policy-agent/opa	Time to revision 4 days
Thu 10 Apr 2025· 1 change
2025-04-10published 2025-03-21	GHSA-mh63-6h87-95cpCVE-2025-30204	go high	not named as affected when the advisory was published, now names github.com/golang-jwt/jwt	Time to revision 20 days
Sun 16 Mar 2025· 1 change
2025-03-16published 2024-12-18	GHSA-w32m-9786-jp63CVE-2024-45338	go high	not named as affected when the advisory was published, now names golang.org/x/net/html	Time to revision 88 days
Wed 26 Feb 2025· 1 change
2025-02-26published 2025-02-24	GHSA-c6gw-w398-hv78CVE-2025-27144	go moderate	not named as affected when the advisory was published, now names github.com/go-jose/go-jose	Time to revision 2 days
Wed 5 Feb 2025· 1 change
2025-02-05published 2025-01-30	GHSA-47g2-qmh2-749vCVE-2025-23216	go moderate	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd	Time to revision 6 days
Fri 10 Jan 2025· 1 change
2025-01-10published 2024-12-02	GHSA-4cx5-89vm-833xCVE-2024-52800	maven low	not named as affected when the advisory was published, now names org.verapdf:verapdf-library	Time to revision 39 days
Thu 12 Dec 2024· 1 change
2024-12-12published 2024-11-27	GHSA-55v3-xh23-96ghCVE-2024-53859	go moderate	not named as affected when the advisory was published, now names github.com/cli/go-gh	Time to revision 15 days
Wed 4 Dec 2024· 1 change
2024-12-04published 2024-12-04	GHSA-2m9h-r57g-45pjCVE-2024-54132	go moderate	not named as affected when the advisory was published, now names github.com/cli/cli	Time to revision 0 days
Tue 19 Nov 2024· 1 change
2024-11-19published 2024-11-14	GHSA-p2h2-3vg9-4p87CVE-2024-52308	go high	not named as affected when the advisory was published, now names github.com/cli/cli	Time to revision 5 days
Mon 28 Oct 2024· 1 change
2024-10-28published 2020-10-13	GHSA-j257-jfvv-h3x5CVE-2020-15251	pypi moderate	not named as affected when the advisory was published, now names sopel-plugins-channelmgnt	Duration unknown
Mon 14 Oct 2024· 1 change
2024-10-14published 2024-09-04	GHSA-7h5p-mmpp-hgmmCVE-2024-43405	go moderate	not named as affected when the advisory was published, now names github.com/projectdiscovery/nuclei/v3	Time to revision 40 days
Wed 9 Oct 2024· 2 changes
2024-10-09published 2024-10-01	GHSA-fhqq-8f65-5xfcCVE-2024-9407	go moderate	not named as affected when the advisory was published, now names github.com/containers/podman	Time to revision 8 days
2024-10-09published 2024-10-01	GHSA-3h3x-2hwv-hr52CVE-2024-9355	go high	not named as affected when the advisory was published, now names github.com/golang-fips/openssl	Time to revision 8 days
Mon 7 Oct 2024· 1 change
2024-10-07published 2018-07-13	GHSA-xcp8-hh74-f6mcCVE-2017-2592	pypi high	not named as affected when the advisory was published, now names oslo-middleware	Duration unknown
Mon 16 Sep 2024· 7 changes
2024-09-16published 2024-01-31	GHSA-4pwp-cx67-5cpxCVE-2019-19499	go moderate	not named as affected when the advisory was published, now names github.com/grafana/grafana	Time to revision 229 days
2024-09-16published 2024-01-30 to 2024-01-31	Show all 3 advisories in this change: Package added to advisory: github.com/hashicorp/vault named as affected in goHide the 3 advisories in this change: Package added to advisory: github.com/hashicorp/vault named as affected in go	go 3 bands	not named as affected when the advisory was published, now names github.com/hashicorp/vault	Time to revision 230 to 230 days
2024-09-16published 2024-01-30	GHSA-m979-w9wj-qfj9CVE-2020-10660	same package registry as the line abovemoderate	same change as the line above	Time to revision 230 days
2024-09-16published 2024-01-31	GHSA-4mp7-2m29-gqxfCVE-2020-16251	same package registry as the line abovehigh	same change as the line above	Time to revision 230 days
2024-09-16published 2024-01-30	GHSA-j6vv-vv26-rh7cCVE-2020-10661	same package registry as the line abovecritical	same change as the line above	Time to revision 230 days
2024-09-16published 2024-09-03	GHSA-g5xx-c4hv-9ccc	go low	not named as affected when the advisory was published, now names github.com/cometbft/cometbft	Time to revision 13 days
2024-09-16published 2024-08-26	GHSA-cj55-gc7m-wvcqCVE-2024-45258	go moderate	not named as affected when the advisory was published, now names github.com/imroc/req	Time to revision 22 days
2024-09-16published 2022-05-13	GHSA-wp7w-vx86-vj9hCVE-2018-10856	go high	not named as affected when the advisory was published, now names github.com/containers/podman	Time to revision 858 days
Wed 11 Sep 2024· 1 change
2024-09-11published 2024-06-10	GHSA-3mwc-2cj7-gx8cCVE-2024-5389	npm moderate	not named as affected when the advisory was published, now names lunary	Time to revision 94 days
Fri 6 Sep 2024· 1 change
2024-09-06published 2024-09-05	GHSA-7q74-g774-7x3g	go high	not named as affected when the advisory was published, now names github.com/cosmos/interchain-security	Time to revision 1 days
Wed 14 Aug 2024· 1 change
2024-08-14published 2022-05-24	GHSA-w7pm-cc4v-f3g8CVE-2020-7961	maven critical	not named as affected when the advisory was published, now names com.liferay.portal:com.liferay.portal.kernel	Duration unknown
Wed 7 Aug 2024· 2 changes
2024-08-07published 2024-08-02	GHSA-rpcc-p8xm-rc6pCVE-2024-3056	go high	not named as affected when the advisory was published, now names github.com/containers/podman	Time to revision 5 days
2024-08-07published 2024-07-24	GHSA-v8wx-v5jq-qhhwCVE-2024-41666	go moderate	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd/v2	Time to revision 14 days
Tue 9 Jul 2024· 2 changes
2024-07-09published 2024-07-05	GHSA-gxrv-wf35-62w9Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-gxrv-wf35-62w9Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-gxrv-wf35-62w9	go high	not named as affected when the advisory was published, now names github.com/traefik/traefik/v2 and 1 more	Time to revision 4 days
2024-07-09published 2024-07-05	GHSA-gxrv-wf35-62w9CVE-2024-39321	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/traefik/traefik/v2	Time to revision 4 days
2024-07-09published 2024-07-05	GHSA-gxrv-wf35-62w9CVE-2024-39321	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/traefik/traefik/v3	Time to revision 4 days
Mon 8 Jul 2024· 3 changes
2024-07-08published 2024-02-03	Show all 3 advisories in this change: Package added to advisory: go.etcd.io/etcd/v3 named as affected in goHide the 3 advisories in this change: Package added to advisory: go.etcd.io/etcd/v3 named as affected in go	go 2 bands	not named as affected when the advisory was published, now names go.etcd.io/etcd/v3	Time to revision 157 days
2024-07-08published 2024-02-03	GHSA-vjg6-93fv-qv64	same package registry as the line abovelow	same change as the line above	Time to revision 157 days
2024-07-08published 2024-02-03	GHSA-pm3m-32r3-7mfh	same package registry as the line abovelow	same change as the line above	Time to revision 157 days
2024-07-08published 2024-02-03	GHSA-j86v-2vjr-fg8f	same package registry as the line abovemoderate	same change as the line above	Time to revision 157 days
Mon 20 May 2024· 4 changes
2024-05-20published 2024-05-14	GHSA-6wvf-f2vw-3425CVE-2024-3727	go high	not named as affected when the advisory was published, now names github.com/containers/image/v5	Time to revision 6 days
2024-05-20published 2024-03-18	GHSA-6v85-wr92-q4p7CVE-2024-21661	go high	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd/v2	Time to revision 63 days
2024-05-20published 2022-12-08	GHSA-xrjj-mj9h-534mCVE-2022-41717	go moderate	not named as affected when the advisory was published, now names golang.org/x/net	Time to revision 529 days
2024-05-20published 2024-05-14	GHSA-4724-7jwc-3fpwCVE-2022-39324	go moderate	not named as affected when the advisory was published, now names github.com/grafana/grafana	Time to revision 6 days
Wed 17 Apr 2024· 1 change
2024-04-17published 2024-04-04	GHSA-4v7x-pqxf-cx7mCVE-2023-45288	go moderate	not named as affected when the advisory was published, now names golang.org/x/net	Time to revision 13 days
Mon 1 Apr 2024· 1 change
2024-04-01published 2022-05-24	GHSA-56gj-927p-mfphCVE-2019-10397	maven low	not named as affected when the advisory was published, now names org.jenkins-ci.plugins:aqua-serverless	Time to revision 678 days
Fri 22 Mar 2024· 1 change
2024-03-22published 2024-03-18	GHSA-2vgg-9h6w-m454CVE-2024-21662	go moderate	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd/v2	Time to revision 4 days
Thu 21 Mar 2024· 1 change
2024-03-21published 2024-03-20	GHSA-78hx-gp6g-7mj6CVE-2024-1394	go high	not named as affected when the advisory was published, now names github.com/microsoft/go-crypto-openssl/openssl	Time to revision 1 days
Thu 14 Mar 2024· 3 changes
2024-03-14published 2024-03-04	GHSA-7jwh-3vrq-q3m8	go high	not named as affected when the advisory was published, now names github.com/jackc/pgproto3/v2	Time to revision 10 days
2024-03-14published 2024-03-04	GHSA-mrww-27vc-gghvShow all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-mrww-27vc-gghvHide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-mrww-27vc-gghv	go high	not named as affected when the advisory was published, now names github.com/jackc/pgx/v4 and 1 more	Time to revision 10 days
2024-03-14published 2024-03-04	GHSA-mrww-27vc-gghvCVE-2024-27304	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/jackc/pgx/v4	Time to revision 10 days
2024-03-14published 2024-03-04	GHSA-mrww-27vc-gghvCVE-2024-27304	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/jackc/pgx/v5	Time to revision 10 days
Tue 12 Mar 2024· 1 change
2024-03-12published 2024-03-04	GHSA-m7wr-2xf7-cm9pCVE-2024-27289	go high	not named as affected when the advisory was published, now names github.com/jackc/pgx/v4	Time to revision 8 days
Tue 23 Jan 2024· 10 changes
2024-01-23published 2022-10-19 to 2024-01-09	Show all 3 advisories in this change: Package added to advisory: 8 packages named as affected in goHide the 3 advisories in this change: Package added to advisory: 8 packages named as affected in go10 rows, one per advisory and package	go moderate	not named as affected when the advisory was published, now names github.com/fluxcd/helm-controller/api and 7 more	Time to revision 14 to 49 days
2024-01-23published 2022-10-19	GHSA-f4p5-x4vc-mh4vCVE-2022-39272	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/fluxcd/helm-controller/api	Duration unknown
2024-01-23published 2022-10-19	GHSA-f4p5-x4vc-mh4vCVE-2022-39272	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/fluxcd/image-automation-controller/api	Duration unknown
2024-01-23published 2022-10-19	GHSA-f4p5-x4vc-mh4vCVE-2022-39272	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/fluxcd/image-reflector-controller/api	Duration unknown
2024-01-23published 2022-10-19	GHSA-f4p5-x4vc-mh4vCVE-2022-39272	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/fluxcd/kustomize-controller/api	Duration unknown
2024-01-23published 2022-10-19	GHSA-f4p5-x4vc-mh4vCVE-2022-39272	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/fluxcd/notification-controller/api	Duration unknown
2024-01-23published 2022-10-19	GHSA-f4p5-x4vc-mh4vCVE-2022-39272	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/fluxcd/source-controller/api	Duration unknown
2024-01-23published 2024-01-09	GHSA-pvcr-v8j8-j5q3CVE-2024-21664	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/lestrrat-go/jwx	Time to revision 14 days
2024-01-23published 2024-01-09	GHSA-pvcr-v8j8-j5q3CVE-2024-21664	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/lestrrat-go/jwx/v2	Time to revision 14 days
2 more rows in this change are not listed here. Open all 10 rows →
Tue 12 Dec 2023· 1 change
2023-12-12published 2023-12-06	GHSA-7664-hcp7-f497CVE-2023-6458	go high	not named as affected when the advisory was published, now names github.com/mattermost/mattermost/server	Time to revision 7 days
Tue 28 Nov 2023· 1 change
2023-11-28published 2022-08-31	GHSA-325v-g5vx-whxcCVE-2022-36746	packagist moderate	not named as affected when the advisory was published, now names librenms/librenms	Duration unknown
Thu 9 Nov 2023· 1 change
2023-11-09published 2023-11-08	GHSA-vfp6-jrw2-99g9CVE-2023-46737	go low	not named as affected when the advisory was published, now names github.com/sigstore/cosign/v2	Time to revision 1 days
Wed 8 Nov 2023· 3 changes
2023-11-08published 2023-05-18	GHSA-mgc4-wqv7-4pxm	swifturl critical	not named as affected when the advisory was published, now names github.com/apple/swift-nio	Time to revision 174 days
2023-11-08published 2023-05-18	Show all 2 advisories in this change: Package added to advisory: github.com/apple/swift-nio-http2 named as affected in swifturlHide the 2 advisories in this change: Package added to advisory: github.com/apple/swift-nio-http2 named as affected in swifturl	swifturl high	not named as affected when the advisory was published, now names github.com/apple/swift-nio-http2	Time to revision 174 days
2023-11-08published 2023-05-18	GHSA-pgfx-g6rc-8cjvCVE-2022-24668	same package registry as the line abovehigh	same change as the line above	Time to revision 174 days
2023-11-08published 2023-05-18	GHSA-w3f6-pc54-gfw7CVE-2022-24667	same package registry as the line abovehigh	same change as the line above	Time to revision 174 days
Tue 7 Nov 2023· 3 changes
2023-11-07published 2022-02-11	Show all 3 advisories in this change: Package added to advisory: github.com/apple/swift-nio-http2 named as affected in swifturlHide the 3 advisories in this change: Package added to advisory: github.com/apple/swift-nio-http2 named as affected in swifturl	swifturl high	not named as affected when the advisory was published, now names github.com/apple/swift-nio-http2	Time to revision 634 days
2023-11-07published 2022-02-11	GHSA-pv7r-9vjg-g3f9	same package registry as the line abovehigh	same change as the line above	Time to revision 634 days
2023-11-07published 2022-02-11	GHSA-wfvq-p7qf-vv64	same package registry as the line abovehigh	same change as the line above	Time to revision 634 days
2023-11-07published 2022-02-11	GHSA-gpgx-whwh-r297	same package registry as the line abovehigh	same change as the line above	Time to revision 634 days
Mon 6 Nov 2023· 6 changes
2023-11-06published 2023-06-09	GHSA-rv3x-xq3r-8j9hCVE-2021-37634	swifturl moderate	not named as affected when the advisory was published, now names github.com/vapor/leaf-kit	Time to revision 149 days
2023-11-06published 2023-06-09	Show all 2 advisories in this change: Package added to advisory: github.com/grpc/grpc-swift named as affected in swifturlHide the 2 advisories in this change: Package added to advisory: github.com/grpc/grpc-swift named as affected in swifturl	swifturl high	not named as affected when the advisory was published, now names github.com/grpc/grpc-swift	Time to revision 149 days
2023-11-06published 2023-06-09	GHSA-2jx2-qcm4-rf9hCVE-2021-36153	same package registry as the line abovehigh	same change as the line above	Time to revision 149 days
2023-11-06published 2023-06-09	GHSA-rxmj-hg9v-vp3pCVE-2021-36155	same package registry as the line abovehigh	same change as the line above	Time to revision 149 days
2023-11-06published 2023-06-09	Show all 3 advisories in this change: Package added to advisory: github.com/vapor/vapor named as affected in swifturlHide the 3 advisories in this change: Package added to advisory: github.com/vapor/vapor named as affected in swifturl	swifturl moderate	not named as affected when the advisory was published, now names github.com/vapor/vapor	Time to revision 149 days
2023-11-06published 2023-06-09	GHSA-pqwh-c2f3-vxmqCVE-2021-32742	same package registry as the line abovemoderate	same change as the line above	Time to revision 149 days
2023-11-06published 2023-06-09	GHSA-gcj9-jj38-hwmcCVE-2021-21328	same package registry as the line abovemoderate	same change as the line above	Time to revision 149 days
2023-11-06published 2023-06-09	GHSA-vcvg-xgr8-p5gqCVE-2020-15230	same package registry as the line abovemoderate	same change as the line above	Time to revision 149 days
Sat 4 Nov 2023· 6 changes
2023-11-04published 2023-05-22	GHSA-4rhq-vq24-88gwCVE-2021-36154	swifturl moderate	not named as affected when the advisory was published, now names github.com/grpc/grpc-swift	Time to revision 165 days
2023-11-04published 2023-06-07	GHSA-vj2m-9f5j-mpr5CVE-2022-31005	swifturl high	not named as affected when the advisory was published, now names github.com/vapor/vapor	Time to revision 150 days
2023-11-04published 2023-06-07	GHSA-239c-6cv2-wwx8CVE-2022-1642	swifturl high	not named as affected when the advisory was published, now names github.com/apple/swift-corelibs-foundation	Time to revision 150 days
2023-11-04published 2023-06-07	GHSA-773g-x274-8qmfCVE-2022-3252	swifturl high	not named as affected when the advisory was published, now names github.com/apple/swift-nio-extras	Time to revision 150 days
2023-11-04published 2023-06-07	GHSA-7fj7-39wj-c64fCVE-2022-3215	swifturl moderate	not named as affected when the advisory was published, now names github.com/apple/swift-nio	Time to revision 150 days
2023-11-04published 2023-06-07	GHSA-v3r5-pjpm-mwgqCVE-2023-0040	swifturl high	not named as affected when the advisory was published, now names github.com/swift-server/async-http-client	Time to revision 150 days
Fri 3 Nov 2023· 1 change
2023-11-03published 2023-06-07	GHSA-qvxg-wjxc-r4ggCVE-2022-31019	swifturl high	not named as affected when the advisory was published, now names github.com/vapor/vapor	Time to revision 149 days
Thu 2 Nov 2023· 2 changes
2023-11-02published 2023-03-31	GHSA-5c9c-6x87-f9vmCVE-2022-4899	swifturl high	not named as affected when the advisory was published, now names github.com/facebook/zstd	Time to revision 215 days
2023-11-02published 2022-05-24	GHSA-frg3-gpcx-968fCVE-2019-8849	swifturl critical	not named as affected when the advisory was published, now names github.com/apple/swift-nio-ssl	Time to revision 527 days
Fri 20 Oct 2023· 1 change
2023-10-20published 2023-08-04	GHSA-2xx4-jj5v-6mffCVE-2023-37896	go high	not named as affected when the advisory was published, now names github.com/projectdiscovery/nuclei	Time to revision 77 days
Thu 5 Oct 2023· 2 changes
2023-10-05published 2022-05-24	GHSA-xj7v-c82w-92q2CVE-2018-21034	go moderate	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd	Time to revision 499 days
2023-10-05published 2022-05-13	GHSA-2cjc-rgmp-x649CVE-2018-15598	go high	not named as affected when the advisory was published, now names github.com/traefik/traefik	Time to revision 511 days
Mon 2 Oct 2023· 40 changes
2023-10-02published 2021-05-18 to 2022-10-31	Show all 38 advisories in this change: Package added to advisory: 26 packages named as affected in goHide the 38 advisories in this change: Package added to advisory: 26 packages named as affected in go40 rows, one per advisory and package	go 4 bands	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki and 25 more	Time to revision 496 days
2023-10-02published 2021-11-19	GHSA-3pqh-p72c-fj85CVE-2021-3978	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki	Duration unknown
2023-10-02published 2022-02-14	GHSA-8459-6rc9-8vf8	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki	Duration unknown
2023-10-02published 2021-11-10	GHSA-g5gj-9ggf-9vmqCVE-2021-3908	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki	Duration unknown
2023-10-02published 2021-11-10	GHSA-8cvr-4rrf-f244CVE-2021-3909	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki	Duration unknown
2023-10-02published 2022-01-08	GHSA-f9jg-8p32-2f55CVE-2021-25743	same package registry as the line abovelow	not named as affected when the advisory was published, now names k8s.io/kubernetes	Duration unknown
2023-10-02published 2022-05-24	GHSA-x3jr-pf6g-c48fCVE-2019-11841	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names golang.org/x/crypto	Time to revision 496 days
2023-10-02published 2021-05-24	GHSA-jhj6-5mh6-4pvfCVE-2020-26213	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names ktbs.dev/teler	Duration unknown
2023-10-02published 2022-02-15	GHSA-77cr-6gr8-7rr9CVE-2020-27195	same package registry as the line abovecritical	not named as affected when the advisory was published, now names github.com/hashicorp/nomad	Duration unknown
32 more rows in this change are not listed here. Open all 40 rows →
Fri 29 Sep 2023· 9 changes
2023-09-29published 2021-12-09	GHSA-vj54-cjrx-x696CVE-2020-11576	go moderate	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd	Duration unknown
2023-09-29published 2021-05-18	GHSA-fx8w-mjvm-hvpcCVE-2020-10696	go high	not named as affected when the advisory was published, now names github.com/containers/buildah	Duration unknown
2023-09-29published 2022-05-24	GHSA-w3r9-r9w7-8h48CVE-2019-11939	go high	not named as affected when the advisory was published, now names github.com/facebook/fbthrift	Time to revision 493 days
2023-09-29published 2021-05-18	GHSA-h74j-692g-48mqCVE-2019-10743	go moderate	not named as affected when the advisory was published, now names github.com/mholt/archiver	Duration unknown
2023-09-29published 2021-05-18	GHSA-jp4j-47f9-2vc3CVE-2019-13126	go high	not named as affected when the advisory was published, now names github.com/nats-io/nats-server/v2	Duration unknown
2023-09-29published 2021-05-18 to 2023-06-09	Show all 2 advisories in this change: Package added to advisory: github.com/hashicorp/consul named as affected in goHide the 2 advisories in this change: Package added to advisory: github.com/hashicorp/consul named as affected in go	go high	not named as affected when the advisory was published, now names github.com/hashicorp/consul	Time to revision 112 days
2023-09-29published 2023-06-09	GHSA-h65h-v7fw-4p38CVE-2019-12291	same package registry as the line abovehigh	same change as the line above	Time to revision 112 days
2023-09-29published 2021-05-18	GHSA-23jv-v6qj-3fhhCVE-2020-7219	same package registry as the line abovehigh	same change as the line above	Duration unknown
2023-09-29published 2022-02-15	GHSA-6g5f-f5pm-mjrgCVE-2019-12243	go high	not named as affected when the advisory was published, now names istio.io/istio	Duration unknown
2023-09-29published 2021-05-18	GHSA-h43v-26r7-7j4cCVE-2020-7218	go high	not named as affected when the advisory was published, now names github.com/hashicorp/nomad	Duration unknown

Counted in advisories, never added to the CVE and KEV figures. This kind is counted once per advisory and per package, so one advisory that named four further packages counts four times. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

4,561 record edits in the 52 weeks to 2026-09-07. Scroll for earlier dates.fewermore

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →