Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

339 advisory changes refused · newest first · grouped by day

These rows are not counted anywhere on this site. Checked and refused means we compared this change and then rejected it: the false positive filter for this kind of change judged it to be a false positive rather than a real change. The row is shown so you can check the filter and disagree with us, and it is counted in no figure on this site. No advisory change is here: the advisory engine counts the 2,291 version pairs its filters refused by class rather than writing them out one by one, so this view holds CVE and KEV changes only.

Rows we checked and refused, counted nowhere, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Advisory, Which advisory was edited, by its GHSA id.	Package, The package the advisory names, and the registry it comes from.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Mon 2 Oct 2023· 40 changes
2023-10-02published 2021-05-18 to 2022-10-31	Package added to advisory	Show all 38 advisories in this change: Package added to advisory: 26 packages named as affected in goHide the 38 advisories in this change: Package added to advisory: 26 packages named as affected in go40 rows, one per advisory and package	go 4 bands	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki and 25 more	Time to revision 496 days
2023-10-02published 2021-11-19	same kind of change as the line above	GHSA-3pqh-p72c-fj85CVE-2021-3978	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki	Duration unknown
2023-10-02published 2022-02-14	same kind of change as the line above	GHSA-8459-6rc9-8vf8	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki	Duration unknown
2023-10-02published 2021-11-10	same kind of change as the line above	GHSA-g5gj-9ggf-9vmqCVE-2021-3908	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki	Duration unknown
2023-10-02published 2021-11-10	same kind of change as the line above	GHSA-8cvr-4rrf-f244CVE-2021-3909	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/cloudflare/cfrpki	Duration unknown
2023-10-02published 2022-01-08	same kind of change as the line above	GHSA-f9jg-8p32-2f55CVE-2021-25743	same package registry as the line abovelow	not named as affected when the advisory was published, now names k8s.io/kubernetes	Duration unknown
2023-10-02published 2022-05-24	same kind of change as the line above	GHSA-x3jr-pf6g-c48fCVE-2019-11841	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names golang.org/x/crypto	Time to revision 496 days
2023-10-02published 2021-05-24	same kind of change as the line above	GHSA-jhj6-5mh6-4pvfCVE-2020-26213	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names ktbs.dev/teler	Duration unknown
2023-10-02published 2022-02-15	same kind of change as the line above	GHSA-77cr-6gr8-7rr9CVE-2020-27195	same package registry as the line abovecritical	not named as affected when the advisory was published, now names github.com/hashicorp/nomad	Duration unknown
32 more rows in this change are not listed here. Open all 40 rows →
Fri 29 Sep 2023· 11 changes
2023-09-29published 2021-12-09	Package added to advisory	GHSA-vj54-cjrx-x696CVE-2020-11576	go moderate	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd	Duration unknown
2023-09-29published 2021-05-18	Package added to advisory	GHSA-fx8w-mjvm-hvpcCVE-2020-10696	go high	not named as affected when the advisory was published, now names github.com/containers/buildah	Duration unknown
2023-09-29published 2022-05-24	Package added to advisory	GHSA-w3r9-r9w7-8h48CVE-2019-11939	go high	not named as affected when the advisory was published, now names github.com/facebook/fbthrift	Time to revision 493 days
2023-09-29published 2021-05-18	Package added to advisory	GHSA-h74j-692g-48mqCVE-2019-10743	go moderate	not named as affected when the advisory was published, now names github.com/mholt/archiver	Duration unknown
2023-09-29published 2021-05-18	Package added to advisory	GHSA-jp4j-47f9-2vc3CVE-2019-13126	go high	not named as affected when the advisory was published, now names github.com/nats-io/nats-server/v2	Duration unknown
2023-09-29published 2021-05-18 to 2023-06-09	Package added to advisory	Show all 2 advisories in this change: Package added to advisory: github.com/hashicorp/consul named as affected in goHide the 2 advisories in this change: Package added to advisory: github.com/hashicorp/consul named as affected in go	go high	not named as affected when the advisory was published, now names github.com/hashicorp/consul	Time to revision 112 days
2023-09-29published 2023-06-09	same kind of change as the line above	GHSA-h65h-v7fw-4p38CVE-2019-12291	same package registry as the line abovehigh	same change as the line above	Time to revision 112 days
2023-09-29published 2021-05-18	same kind of change as the line above	GHSA-23jv-v6qj-3fhhCVE-2020-7219	same package registry as the line abovehigh	same change as the line above	Duration unknown
2023-09-29published 2022-02-15	Package added to advisory	GHSA-6g5f-f5pm-mjrgCVE-2019-12243	go high	not named as affected when the advisory was published, now names istio.io/istio	Duration unknown
2023-09-29published 2021-05-18	Package added to advisory	GHSA-h43v-26r7-7j4cCVE-2020-7218	go high	not named as affected when the advisory was published, now names github.com/hashicorp/nomad	Duration unknown
2023-09-29published 2021-05-18	Package added to advisory	GHSA-h3p9-wrgx-82cmCVE-2019-19316	go high	not named as affected when the advisory was published, now names github.com/hashicorp/terraform	Duration unknown
2023-09-29published 2021-05-18	Package added to advisory	GHSA-pmqp-h87c-mr78CVE-2019-11253	go high	not named as affected when the advisory was published, now names k8s.io/kubernetes	Duration unknown
Thu 28 Sep 2023· 1 change
2023-09-28published 2022-05-14	Package added to advisory	GHSA-xrxm-mvqm-r553CVE-2019-1000008	go moderate	not named as affected when the advisory was published, now names helm.sh/helm	Time to revision 503 days
Tue 26 Sep 2023· 1 change
2023-09-26published 2022-05-24	Package added to advisory	GHSA-p5pc-m4q7-7qm9CVE-2019-18658	go critical	not named as affected when the advisory was published, now names helm.sh/helm	Time to revision 490 days
Tue 19 Sep 2023· 1 change
2023-09-19published 2021-09-09	Package added to advisory	GHSA-2r2w-jrh2-p4grCVE-2021-31274	packagist moderate	not named as affected when the advisory was published, now names librenms/librenms	Duration unknown
Mon 18 Sep 2023· 5 changes
2023-09-18published 2022-02-15	Package added to advisory	GHSA-9wvh-ff5f-xjpjCVE-2019-16097	go moderate	not named as affected when the advisory was published, now names github.com/goharbor/harbor	Duration unknown
2023-09-18published 2021-05-18	Package added to advisory	GHSA-3f8r-4qwm-r7jfCVE-2019-12405	go critical	not named as affected when the advisory was published, now names github.com/apache/trafficcontrol	Duration unknown
2023-09-18published 2021-05-18	Package added to advisory	GHSA-xhg2-rvm8-w2jhCVE-2019-13209	go high	not named as affected when the advisory was published, now names github.com/rancher/rancher	Duration unknown
2023-09-18published 2022-02-15	Package added to advisory	GHSA-g622-r636-qfqhCVE-2019-9039	go critical	not named as affected when the advisory was published, now names github.com/couchbase/sync_gateway	Duration unknown
2023-09-18published 2021-12-20	Package added to advisory	GHSA-557g-r22w-9wvxCVE-2019-11328	go high	not named as affected when the advisory was published, now names github.com/sylabs/singularity	Duration unknown
Fri 15 Sep 2023· 4 changes
2023-09-15published 2021-05-18	Package added to advisory	GHSA-gh32-pc56-4c96CVE-2020-10750	go moderate	not named as affected when the advisory was published, now names github.com/jaegertracing/jaeger	Duration unknown
2023-09-15published 2022-02-15	Package added to advisory	GHSA-hpmr-prr2-cqc4CVE-2019-11229	go high	not named as affected when the advisory was published, now names github.com/go-gitea/gitea	Duration unknown
2023-09-15published 2022-02-15	Package added to advisory	GHSA-4fqx-74rv-638wCVE-2019-3792	go high	not named as affected when the advisory was published, now names github.com/concourse/concourse	Duration unknown
2023-09-15published 2022-02-15	Package added to advisory	GHSA-5gjm-fj42-x983CVE-2018-1098	go high	not named as affected when the advisory was published, now names go.etcd.io/etcd/v3	Duration unknown
Tue 12 Sep 2023· 1 change
2023-09-12published 2023-09-08	Package added to advisory	GHSA-3q5p-3558-364fCVE-2023-41338	go moderate	not named as affected when the advisory was published, now names github.com/gofiber/fiber/v2	Time to revision 4 days
Wed 30 Aug 2023· 1 change
2023-08-30published 2021-05-18	Package added to advisory	GHSA-5rcv-m4m3-hfh7CVE-2020-14040	go moderate	not named as affected when the advisory was published, now names golang.org/x/text	Duration unknown
Tue 29 Aug 2023· 1 change
2023-08-29published 2022-04-30	Package added to advisory	GHSA-66vw-v2x9-hw75CVE-2022-1227	go high	not named as affected when the advisory was published, now names github.com/containers/podman/v3	Duration unknown
Fri 25 Aug 2023· 1 change
2023-08-25published 2022-05-24	Package added to advisory	GHSA-rh5f-2w6r-q7vjCVE-2019-10152	go high	not named as affected when the advisory was published, now names github.com/containers/podman	Time to revision 458 days
Thu 24 Aug 2023· 1 change
2023-08-24published 2022-05-24	Package added to advisory	GHSA-r3fq-cmmw-cpmmCVE-2019-12452	go high	not named as affected when the advisory was published, now names github.com/traefik/traefik	Time to revision 457 days
Thu 27 Jul 2023· 1 change
2023-07-27published 2023-07-17	Package added to advisory	GHSA-9x44-9pgq-cf45CVE-2023-37475	go high	not named as affected when the advisory was published, now names github.com/hamba/avro/v2	Time to revision 10 days
Mon 17 Apr 2023· 1 change
2023-04-17published 2022-02-15	Package added to advisory	GHSA-6hv3-7c34-4hx8CVE-2019-14802	go moderate	not named as affected when the advisory was published, now names github.com/hashicorp/nomad	Duration unknown
Fri 7 Apr 2023· 1 change
2023-04-07published 2023-03-31	Package added to advisory	GHSA-63f2-6959-2pxjCVE-2023-1776	go moderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 7 days
Thu 6 Apr 2023· 1 change
2023-04-06published 2023-03-30	Package added to advisory	GHSA-2wcr-87wf-cf9jCVE-2023-27489	pypi high	not named as affected when the advisory was published, now names kiwitcms	Time to revision 7 days
Thu 30 Mar 2023· 1 change
2023-03-30published 2021-08-25	Package added to advisory	GHSA-p9gf-gmfv-398mCVE-2021-29938	crates.io high	not named as affected when the advisory was published, now names slice-deque	Duration unknown
Thu 23 Mar 2023· 1 change
2023-03-23published 2023-03-16	Package added to advisory	GHSA-5g39-ppwg-6xx8CVE-2023-28105	go high	not named as affected when the advisory was published, now names github.com/dablelv/go-huge-util	Time to revision 7 days
Wed 8 Mar 2023· 1 change
2023-03-08published 2022-08-31	Package added to advisory	GHSA-5229-94p3-7wwqCVE-2022-36745	packagist moderate	not named as affected when the advisory was published, now names librenms/librenms	Duration unknown
Sat 25 Feb 2023· 7 changes
2023-02-25published 2022-02-11	Package added to advisory	GHSA-76wf-9vgp-pj7w	go moderate	not named as affected when the advisory was published, now names github.com/aws/aws-sdk-go	Duration unknown
2023-02-25published 2022-05-13 to 2023-01-14	Package added to advisory	Show all 2 advisories in this change: Package added to advisory: golang.org/x/net named as affected in goHide the 2 advisories in this change: Package added to advisory: golang.org/x/net named as affected in go	go high	not named as affected when the advisory was published, now names golang.org/x/net	Time to revision 42 to 288 days
2023-02-25published 2022-05-13	same kind of change as the line above	GHSA-fcf9-6fv2-fc5vCVE-2018-17143	same package registry as the line abovehigh	same change as the line above	Time to revision 288 days
2023-02-25published 2023-01-14	same kind of change as the line above	GHSA-fxg5-wq6x-vr4wCVE-2022-41721	same package registry as the line abovehigh	same change as the line above	Time to revision 42 days
2023-02-25published 2022-05-13	Package added to advisory	GHSA-h62f-wm92-2cmwCVE-2017-11468	go high	not named as affected when the advisory was published, now names github.com/docker/distribution	Time to revision 288 days
2023-02-25published 2022-06-24	Package added to advisory	GHSA-p782-xgp4-8hr8CVE-2022-29526	go moderate	not named as affected when the advisory was published, now names golang.org/x/sys	Time to revision 246 days
2023-02-25published 2022-05-14	Package added to advisory	GHSA-p5gc-957x-gfw9CVE-2018-12018	go high	not named as affected when the advisory was published, now names github.com/ethereum/go-ethereum	Time to revision 287 days
2023-02-25published 2022-05-14	Package added to advisory	GHSA-w4xh-w33p-4v29CVE-2017-17831	go high	not named as affected when the advisory was published, now names github.com/git-lfs/git-lfs	Time to revision 287 days
Fri 24 Feb 2023· 17 changes
2023-02-24published 2022-05-13 to 2023-02-08	Package added to advisory	Show all 16 advisories in this change: Package added to advisory: 9 packages named as affected in goHide the 16 advisories in this change: Package added to advisory: 9 packages named as affected in go17 rows, one per advisory and package	go 2 bands	not named as affected when the advisory was published, now names k8s.io/apimachinery and 8 more	Time to revision 17 to 288 days
2023-02-24published 2023-02-08	same kind of change as the line above	GHSA-74fp-r6jw-h4mp	same package registry as the line abovehigh	not named as affected when the advisory was published, now names k8s.io/apimachinery	Time to revision 17 days
2023-02-24published 2023-02-06	same kind of change as the line above	GHSA-w55j-f7vx-6q37CVE-2018-1103	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/openshift/source-to-image	Time to revision 18 days
2023-02-24published 2022-12-26	same kind of change as the line above	GHSA-ppp9-7jff-5vj2CVE-2021-38561	same package registry as the line abovehigh	not named as affected when the advisory was published, now names golang.org/x/text	Time to revision 61 days
2023-02-24published 2022-05-24	same kind of change as the line above	GHSA-vfxc-r2gx-v2vqCVE-2019-12496	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/hybridgroup/gobot	Time to revision 276 days
2023-02-24published 2022-05-13	same kind of change as the line above	GHSA-5p4h-3377-7w67CVE-2018-17075	same package registry as the line abovehigh	not named as affected when the advisory was published, now names golang.org/x/net	Time to revision 288 days
2023-02-24published 2022-05-13	same kind of change as the line above	GHSA-mv93-wvcp-7m7rCVE-2018-17848	same package registry as the line abovehigh	not named as affected when the advisory was published, now names golang.org/x/net	Time to revision 288 days
2023-02-24published 2022-05-13	same kind of change as the line above	GHSA-2wp2-chmh-r934CVE-2018-17142	same package registry as the line abovehigh	not named as affected when the advisory was published, now names golang.org/x/net	Time to revision 288 days
2023-02-24published 2022-05-24	same kind of change as the line above	GHSA-8mpq-fmr3-6jxvCVE-2015-1340	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/lxc/lxd	Time to revision 276 days
9 more rows in this change are not listed here. Open all 17 rows →
Thu 23 Feb 2023· 1 change
2023-02-23published 2022-05-13	Package added to advisory	GHSA-4r78-hx75-jjj2CVE-2018-17847	go high	not named as affected when the advisory was published, now names golang.org/x/net	Time to revision 287 days
Wed 22 Feb 2023· 1 change
2023-02-22published 2022-10-14	Package added to advisory	GHSA-69ch-w2m2-3vjpCVE-2022-32149	go high	not named as affected when the advisory was published, now names golang.org/x/text	Duration unknown
Sat 18 Feb 2023· 2 changes
2023-02-18published 2022-09-07	Package added to advisory	GHSA-gwc9-m7rh-j2wwCVE-2021-43565	go high	not named as affected when the advisory was published, now names golang.org/x/crypto	Duration unknown
2023-02-18published 2022-09-07	Package added to advisory	GHSA-69cg-p879-7622CVE-2022-27664	go high	not named as affected when the advisory was published, now names golang.org/x/net	Time to revision 164 days
Fri 17 Feb 2023· 6 changes
2023-02-17published 2022-03-19	Package added to advisory	GHSA-8c26-wmh5-6g9vCVE-2022-27191	go high	not named as affected when the advisory was published, now names golang.org/x/crypto	Duration unknown
2023-02-17published 2022-02-16	Package added to advisory	GHSA-h289-x5wc-xcv8CVE-2022-24968	go moderate	not named as affected when the advisory was published, now names mellium.im/xmpp	Duration unknown
2023-02-17published 2022-05-24	Package added to advisory	GHSA-c92w-72c5-9x59CVE-2019-10223	go moderate	not named as affected when the advisory was published, now names k8s.io/kube-state-metrics	Time to revision 269 days
2023-02-17published 2022-12-28	Package added to advisory	GHSA-3fm3-m23v-5r46CVE-2019-25072	go high	not named as affected when the advisory was published, now names github.com/tendermint/tendermint	Time to revision 52 days
2023-02-17published 2022-07-30	Package added to advisory	GHSA-jxqv-jcvh-7gr4CVE-2022-24912	go high	not named as affected when the advisory was published, now names github.com/runatlantis/atlantis	Duration unknown
2023-02-17published 2022-04-12	Package added to advisory	GHSA-h6xx-pmxh-3wgpCVE-2018-16886	go high	not named as affected when the advisory was published, now names go.etcd.io/etcd	Duration unknown
Thu 16 Feb 2023· 3 changes
2023-02-16published 2021-06-23	Package added to advisory	GHSA-9423-6c93-gpp8CVE-2020-7667	go high	not named as affected when the advisory was published, now names github.com/sassoftware/go-rpmutils	Duration unknown
2023-02-16published 2021-05-18	Package added to advisory	Show all 2 advisories in this change: Package added to advisory: github.com/unknwon/cae named as affected in goHide the 2 advisories in this change: Package added to advisory: github.com/unknwon/cae named as affected in go	go high	not named as affected when the advisory was published, now names github.com/unknwon/cae	Duration unknown
2023-02-16published 2021-05-18	same kind of change as the line above	GHSA-vpx7-vm66-qx8rCVE-2020-7664	same package registry as the line abovehigh	same change as the line above	Duration unknown
2023-02-16published 2021-05-18	same kind of change as the line above	GHSA-88jf-7rch-32qcCVE-2020-7668	same package registry as the line abovehigh	same change as the line above	Duration unknown
Wed 15 Feb 2023· 6 changes
2023-02-15published 2022-10-07	Package added to advisory	GHSA-p658-8693-mhvgCVE-2021-21271	go moderate	not named as affected when the advisory was published, now names github.com/tendermint/tendermint	Duration unknown
2023-02-15published 2023-02-08	Package added to advisory	GHSA-mv6w-j4xc-qpfwCVE-2023-25163	go moderate	not named as affected when the advisory was published, now names github.com/argoproj/argo-cd/v2	Time to revision 7 days
2023-02-15published 2022-05-24 to 2022-05-25	Package added to advisory	Show all 3 advisories in this change: Package added to advisory: github.com/pion/dtls/v2 named as affected in goHide the 3 advisories in this change: Package added to advisory: github.com/pion/dtls/v2 named as affected in go	go 2 bands	not named as affected when the advisory was published, now names github.com/pion/dtls/v2	Duration unknown
2023-02-15published 2022-05-25	same kind of change as the line above	GHSA-w45j-f832-hxvhCVE-2022-29222	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2023-02-15published 2022-05-24	same kind of change as the line above	GHSA-cm8f-h6j3-p25cCVE-2022-29190	same package registry as the line abovehigh	same change as the line above	Duration unknown
2023-02-15published 2022-05-24	same kind of change as the line above	GHSA-cx94-mrg9-rq4jCVE-2022-29189	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2023-02-15published 2022-02-16	Package added to advisory	GHSA-cg3q-j54f-5p7pCVE-2022-21698	go high	not named as affected when the advisory was published, now names github.com/prometheus/client_golang	Duration unknown
Tue 14 Feb 2023· 20 changes
2023-02-14published 2021-05-18 to 2023-01-05	Package added to advisory	Show all 18 advisories in this change: Package added to advisory: 18 packages named as affected in goHide the 18 advisories in this change: Package added to advisory: 18 packages named as affected in go20 rows, one per advisory and package	go 4 bands	not named as affected when the advisory was published, now names github.com/ipld/go-ipld-prime and 17 more	Time to revision 40 to 85 days
2023-02-14published 2023-01-05	same kind of change as the line above	GHSA-c653-6hhg-9x92CVE-2023-22460	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/ipld/go-ipld-prime	Time to revision 40 days
2023-02-14published 2022-11-21	same kind of change as the line above	GHSA-pp3f-xrw5-q5j4CVE-2022-41920	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/duke-git/lancet	Time to revision 85 days
2023-02-14published 2022-11-21	same kind of change as the line above	GHSA-pp3f-xrw5-q5j4CVE-2022-41920	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/duke-git/lancet/v2	Time to revision 85 days
2023-02-14published 2022-11-21	same kind of change as the line above	GHSA-6cqj-6969-p57xCVE-2022-39199	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/codenotary/immudb	Time to revision 85 days
2023-02-14published 2022-11-21	same kind of change as the line above	GHSA-672p-m5jq-mrh8CVE-2022-36111	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/codenotary/immudb	Time to revision 85 days
2023-02-14published 2022-06-03	same kind of change as the line above	GHSA-9w9f-6mg8-jp7wCVE-2022-31022	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/blevesearch/bleve/v2	Duration unknown
2023-02-14published 2022-01-06	same kind of change as the line above	GHSA-jcxc-rh6w-wf49CVE-2021-23772	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/kataras/iris	Duration unknown
2023-02-14published 2021-06-23	same kind of change as the line above	GHSA-qj26-7grj-whg3CVE-2018-6558	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/google/fscrypt	Duration unknown
12 more rows in this change are not listed here. Open all 20 rows →
Mon 13 Feb 2023· 3 changes
2023-02-13published 2021-05-27	Package added to advisory	GHSA-fh74-hm69-rqjwCVE-2019-19921	go moderate	not named as affected when the advisory was published, now names github.com/opencontainers/runc	Duration unknown
2023-02-13published 2023-02-07	Package added to advisory	Show all 2 advisories in this change: Package added to advisory: github.com/pion/dtls/v2 named as affected in goHide the 2 advisories in this change: Package added to advisory: github.com/pion/dtls/v2 named as affected in go	go moderate	not named as affected when the advisory was published, now names github.com/pion/dtls/v2	Time to revision 6 days
2023-02-13published 2023-02-07	same kind of change as the line above	GHSA-4xgv-j62q-h3rj	same package registry as the line abovemoderate	same change as the line above	Time to revision 6 days
2023-02-13published 2023-02-07	same kind of change as the line above	GHSA-hxp2-xqf3-v83h	same package registry as the line abovemoderate	same change as the line above	Time to revision 6 days
Thu 9 Feb 2023· 14 changes
2023-02-09published 2022-02-11 to 2022-07-06	Package added to advisory	Show all 6 advisories in this change: Package added to advisory: 5 packages named as affected in goHide the 6 advisories in this change: Package added to advisory: 5 packages named as affected in go14 rows, one per advisory and package	go 2 bands	not named as affected when the advisory was published, now names github.com/hashicorp/go-getter/gcs/v2 and 4 more	Duration unknown
2023-02-09published 2022-05-26	same kind of change as the line above	GHSA-28r2-q6m8-9hpxCVE-2022-30323	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/hashicorp/go-getter/gcs/v2	Duration unknown
2023-02-09published 2022-05-26	same kind of change as the line above	GHSA-28r2-q6m8-9hpxCVE-2022-30323	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/hashicorp/go-getter/s3/v2	Duration unknown
2023-02-09published 2022-05-26	same kind of change as the line above	GHSA-28r2-q6m8-9hpxCVE-2022-30323	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/hashicorp/go-getter/v2	Duration unknown
2023-02-09published 2022-05-26	same kind of change as the line above	GHSA-cjr4-fv6c-f3mvCVE-2022-30322	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/hashicorp/go-getter/gcs/v2	Duration unknown
2023-02-09published 2022-05-26	same kind of change as the line above	GHSA-cjr4-fv6c-f3mvCVE-2022-30322	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/hashicorp/go-getter/s3/v2	Duration unknown
2023-02-09published 2022-05-26	same kind of change as the line above	GHSA-cjr4-fv6c-f3mvCVE-2022-30322	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/hashicorp/go-getter/v2	Duration unknown
2023-02-09published 2022-05-26	same kind of change as the line above	GHSA-fcgg-rvwg-jv58CVE-2022-30321	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/hashicorp/go-getter/gcs/v2	Duration unknown
2023-02-09published 2022-05-26	same kind of change as the line above	GHSA-fcgg-rvwg-jv58CVE-2022-30321	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/hashicorp/go-getter/s3/v2	Duration unknown
6 more rows in this change are not listed here. Open all 14 rows →
Tue 7 Feb 2023· 1 change
2023-02-07published 2021-05-18	Package added to advisory	GHSA-w73w-5m7g-f7qcCVE-2020-26160	go high	not named as affected when the advisory was published, now names github.com/dgrijalva/jwt-go/v4	Duration unknown
Thu 2 Feb 2023· 1 change
2023-02-02published 2023-02-02	Package added to advisory	GHSA-pgvh-p3g4-86jwCVE-2023-25313	packagist critical	not named as affected when the advisory was published, now names wwbn/avideo	Time to revision 1 days
Thu 4 Aug 2022· 2 changes
2022-08-04published 2022-02-11	Package added to advisory	GHSA-6qq8-5wq3-86rpShow all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-6qq8-5wq3-86rpHide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-6qq8-5wq3-86rp	go moderate	not named as affected when the advisory was published, now names github.com/traefik/traefik/api and 1 more	Time to revision 174 days
2022-08-04published 2022-02-11	same kind of change as the line above	GHSA-6qq8-5wq3-86rpCVE-2020-15129	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/traefik/traefik/api	Time to revision 174 days
2022-08-04published 2022-02-11	same kind of change as the line above	GHSA-6qq8-5wq3-86rpCVE-2020-15129	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/traefik/traefik/v2/pkg/api	Time to revision 174 days
Tue 2 Aug 2022· 1 change
2022-08-02published 2022-07-23	Package added to advisory	GHSA-xg72-6c83-ghh4CVE-2022-2495	packagist moderate	not named as affected when the advisory was published, now names microweber/microweber	Time to revision 11 days
Fri 29 Jul 2022· 1 change
2022-07-29published 2022-02-11	Package added to advisory	GHSA-6qq8-5wq3-86rpCVE-2020-15129	go moderate	not named as affected when the advisory was published, now names github.com/containous/traefik	Time to revision 168 days
Mon 18 Jul 2022· 1 change
2022-07-18published 2021-08-30	Package added to advisory	GHSA-23fq-q7hc-993rCVE-2021-38553	go critical	not named as affected when the advisory was published, now names github.com/hashicorp/vault	Time to revision 322 days
Sat 16 Jul 2022· 3 changes
2022-07-16published 2022-02-15	Package added to advisory	GHSA-5x92-p4p5-33c4CVE-2020-28348	go moderate	not named as affected when the advisory was published, now names github.com/hashicorp/nomad	Time to revision 151 days
2022-07-16published 2022-02-11	Package added to advisory	GHSA-fqfh-778m-2v32	go moderate	not named as affected when the advisory was published, now names github.com/cli/cli	Time to revision 154 days
2022-07-16published 2022-02-15	Package added to advisory	GHSA-5wmg-j84w-4jj4CVE-2018-1002207	go moderate	not named as affected when the advisory was published, now names github.com/mholt/archiver	Time to revision 151 days
Wed 29 Jun 2022· 1 change
2022-06-29published 2022-06-16	Package added to advisory	GHSA-q874-g24w-4q9gCVE-2022-29241	pypi high	not named as affected when the advisory was published, now names jupyter-server	Time to revision 13 days
Fri 10 Jun 2022· 1 change
2022-06-10published 2022-05-25	Package added to advisory	GHSA-hj57-j5cw-2mwpCVE-2022-1706	go moderate	not named as affected when the advisory was published, now names github.com/coreos/ignition/v2	Time to revision 15 days
Tue 29 Mar 2022· 1 change
2022-03-29published 2022-03-25	Package added to advisory	GHSA-p737-p57g-4cprCVE-2022-24757	pypi high	not named as affected when the advisory was published, now names jupyter-server	Time to revision 4 days
Wed 2 Mar 2022· 2 changes
2022-03-02published 2021-11-18	Package added to advisory	GHSA-5629-8855-gf4g	rubygems critical	not named as affected when the advisory was published, now names solidus_core	Time to revision 104 days
2022-03-02published 2021-11-03	Package added to advisory	GHSA-x24j-87x9-jvv5CVE-2021-25973	rubygems moderate	not named as affected when the advisory was published, now names publify_core	Time to revision 119 days
Sat 26 Feb 2022· 1 change
2022-02-26published 2022-02-24	Package added to advisory	GHSA-4cxw-hq44-r344CVE-2021-4070	go critical	not named as affected when the advisory was published, now names github.com/v2fly/v2ray-core	Time to revision 2 days

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →