Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

5,026 advisory changes · newest first · grouped by day

SinceClear the filter
ChangedSourceRows
Counted changes, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindAdvisory, Which advisory was edited, by its GHSA id.Package, The package the advisory names, and the registry it comes from.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Mon 29 Jun 2026· 2 changes
2026-06-29published 2026-05-19Package added to advisoryGHSA-24c8-4792-22hxhighnot named as affected when the advisory was published, now names scriban.signedTime to revision 41 days
2026-06-29published 2019-10-11Package added to advisoryGHSA-p979-4mfw-53vgCVE-2019-16869highnot named as affected when the advisory was published, now names io.netty:nettyDuration unknown
Fri 26 Jun 2026· 2 changes
2026-06-26published 2026-05-29Package added to advisoryGHSA-6x26-5727-rrm9CVE-2026-47268moderatenot named as affected when the advisory was published, now names github.com/naiba/nezhaTime to revision 28 days
2026-06-26published 2026-06-10Package added to advisoryGHSA-8h84-fhqq-q58vCVE-2026-48025moderatenot named as affected when the advisory was published, now names github.com/forgekeep/nebula-meshTime to revision 16 days
Thu 18 Jun 2026· 8 changes
2026-06-18published 2024-01-19Package added to advisoryGHSA-f4qf-m5gf-8jm8CVE-2024-21733moderatenot named as affected when the advisory was published, now names org.apache.tomcat.experimental:tomcat-embed-programmaticTime to revision 881 days
2026-06-18published 2026-04-09Package added to advisoryGHSA-x4m4-345f-5h5gCVE-2026-34487highnot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-tribesTime to revision 70 days
2026-06-18published 2024-11-18Package added to advisoryGHSA-f632-9449-3j4wCVE-2024-52318moderatenot named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-jasperTime to revision 577 days
2026-06-18published 2024-11-18Package added to advisoryGHSA-f632-9449-3j4wCVE-2024-52318moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcatTime to revision 577 days
2026-06-18published 2023-02-20Package added to advisoryGHSA-hfrx-6qgj-fp6cCVE-2023-24998highnot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-catalinaTime to revision 1,214 days
2026-06-18published 2019-05-30Package added to advisoryGHSA-jjpq-gp5q-8q6wCVE-2019-0221moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcatDuration unknown
2026-06-18published 2019-05-30Package added to advisoryGHSA-jjpq-gp5q-8q6wCVE-2019-0221moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-catalinaDuration unknown
2026-06-18published 2022-02-10Advisory severity changedGHSA-xp4x-j9vh-c3wfCVE-2019-15609whole advisorycriticalstated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.Duration unknown
Wed 17 Jun 2026· 1 change
2026-06-17published 2026-06-12Advisory withdrawnGHSA-gv7w-rqvm-qjhrwhole advisoryhighwithdrawn 2026-06-17Time to revision 5 days
Fri 12 Jun 2026· 4 changes
2026-06-12published 2023-10-10Package added to advisoryGHSA-r6j3-px5g-cq3xCVE-2023-45648moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyoteTime to revision 976 days
2026-06-12published 2023-10-10Package added to advisoryGHSA-g8pj-r55q-5c2vCVE-2023-42795moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-catalinaTime to revision 976 days
2026-06-12published 2023-10-10Package added to advisoryGHSA-g8pj-r55q-5c2vCVE-2023-42795moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-utilTime to revision 976 days
2026-06-12published 2026-02-17Package added to advisoryGHSA-fpj8-gq4v-p354CVE-2025-66614moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyoteTime to revision 115 days
Thu 11 Jun 2026· 6 changes
2026-06-11published 2026-05-07Package added to advisoryGHSA-2mh5-3cw6-hrrqCVE-2026-40981highnot named as affected when the advisory was published, now names org.springframework.cloud:spring-cloud-config-serverTime to revision 35 days
2026-06-11published 2022-02-08Package added to advisoryGHSA-m7jv-hq7h-mq7cCVE-2020-13935highnot named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-websocketDuration unknown
2026-06-11published 2022-02-08Package added to advisoryGHSA-m7jv-hq7h-mq7cCVE-2020-13935highnot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-websocketDuration unknown
2026-06-11published 2022-02-09Package added to advisoryGHSA-53hp-jpwq-2jgqCVE-2020-11996highnot named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-coreDuration unknown
2026-06-11published 2023-05-30Advisory severity changedGHSA-mj6p-3pc9-wf5mCVE-2023-2968whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Time to revision 1,108 days
2026-06-11published 2024-04-18Advisory severity changedGHSA-jjff-q3q4-5hh8CVE-2024-30564whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Time to revision 784 days
Tue 9 Jun 2026· 15 changes
2026-06-09published 2022-01-06Advisory fix version movedGHSA-9qj6-4rfq-vm84CVE-2018-25024
crates.ioactix-web
critical
stated at publication 0.7.15, now states 0.7.19Duration unknown
2026-06-09published 2022-01-06Advisory fix version movedGHSA-7x36-h62w-vw65CVE-2018-25026
crates.ioactix-web
critical
stated at publication 0.7.15, now states 0.7.19Duration unknown
2026-06-09published 2022-01-06Advisory fix version movedGHSA-fgfm-hqjw-3265CVE-2018-25025
crates.ioactix-web
critical
stated at publication 0.7.15, now states 0.7.19Duration unknown
2026-06-09published 2021-08-25Advisory fix version movedGHSA-w65j-g6c7-g3m4
crates.ioactix-web
moderate
stated at publication 0.7.15, now states 0.7.19Duration unknown
2026-06-09published 2026-06-01Package added to advisoryGHSA-q53q-5r4j-5729CVE-2026-47425moderatenot named as affected when the advisory was published, now names py-rattlerTime to revision 8 days
2026-06-09published 2026-05-29Advisory severity changedGHSA-j6fm-9rfm-j5hxCVE-2026-41237whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Time to revision 11 days
2026-06-09published 2022-05-24Advisory severity changedGHSA-4hm9-844j-jmxpCVE-2019-13117whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Time to revision 1,477 days
2026-06-09published 2026-05-12Advisory severity changedGHSA-3636-h3vx-6465CVE-2026-44593whole advisoryhighstated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.Time to revision 27 days
2026-06-09published 2026-05-15Advisory severity changedGHSA-rmqr-h98c-qg2mwhole advisoryhighstated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.Time to revision 24 days
2026-06-09published 2026-02-18Advisory withdrawnGHSA-wgm6-9rvv-3438CVE-2026-26957whole advisorymoderatewithdrawn 2026-06-09Time to revision 112 days
2026-06-09published 2026-05-15Advisory withdrawnGHSA-5h62-f8fg-4w7qwhole advisorymoderatewithdrawn 2026-06-09Time to revision 24 days
2026-06-09published 2026-05-15Advisory withdrawnGHSA-wj3q-vw2v-3rj3whole advisorymoderatewithdrawn 2026-06-09Time to revision 24 days
2026-06-09published 2026-05-15Advisory withdrawnGHSA-9r8r-x3vg-6xh4whole advisorymoderatewithdrawn 2026-06-09Time to revision 24 days
2026-06-09published 2026-05-15Advisory withdrawnGHSA-rmqr-h98c-qg2mwhole advisoryhighwithdrawn 2026-06-09Time to revision 24 days
2026-06-09published 2026-05-15Advisory withdrawnGHSA-h36g-93qx-rxgrwhole advisorymoderatewithdrawn 2026-06-09Time to revision 24 days
Mon 8 Jun 2026· 8 changes
2026-06-08published 2026-05-15Package added to advisoryGHSA-w42g-jj8w-fj77highnot named as affected when the advisory was published, now names thorsten/phpmyfaqTime to revision 24 days
2026-06-08published 2021-04-13Package added to advisoryGHSA-3pcr-4982-548mmoderatenot named as affected when the advisory was published, now names shopware/shopwareDuration unknown
2026-06-08published 2025-10-15Package added to advisoryGHSA-6p6v-m64v-jx8qCVE-2025-55039lownot named as affected when the advisory was published, now names pysparkTime to revision 236 days
2026-06-08published 2026-03-25Package added to advisoryGHSA-7h8w-hj9j-8rjwCVE-2026-33718highnot named as affected when the advisory was published, now names openhands-aiTime to revision 75 days
2026-06-08published 2022-05-02Advisory severity changedGHSA-f7w7-6pjc-wwm6CVE-2009-3555whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Time to revision 1,499 days
2026-06-08published 2026-03-03Advisory severity changedGHSA-p4wh-cr8m-gm6cCVE-2026-22217whole advisorymoderatestated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 97 days
2026-06-08published 2025-10-15Advisory severity changedGHSA-6p6v-m64v-jx8qCVE-2025-55039whole advisorylowstated at publication MODERATE, now states LOWA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 236 days
2026-06-08published 2026-05-15Advisory withdrawnGHSA-w42g-jj8w-fj77whole advisoryhighwithdrawn 2026-06-08Time to revision 24 days
Sat 6 Jun 2026· 1 change
2026-06-06published 2026-03-18Advisory fix version movedGHSA-rf6x-r45m-xv3wCVE-2026-33053
pypilangflow
high
stated at publication 1.7.2, now states 1.9.0Time to revision 80 days
Fri 5 Jun 2026· 4 changes
2026-06-05published 2023-08-25Package added to advisoryGHSA-q3mw-pvr8-9ggcCVE-2023-41080moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-catalinaTime to revision 1,015 days
2026-06-05published 2021-06-16Package added to advisoryGHSA-j39c-c8hj-x4j3CVE-2021-25122highnot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyoteDuration unknown
2026-06-05published 2026-04-18Package added to advisoryGHSA-w9r4-94fj-xp69CVE-2026-32690lownot named as affected when the advisory was published, now names apache-airflowTime to revision 48 days
2026-06-05published 2025-09-24Package added to advisoryGHSA-776q-jw43-fhjxCVE-2025-48459criticalnot named as affected when the advisory was published, now names apache-iotdbTime to revision 254 days
Mon 1 Jun 2026· 2 changes
2026-06-01published 2026-05-18Package added to advisoryGHSA-v549-xx3c-6pc8CVE-2026-3637moderatenot named as affected when the advisory was published, now names github.com/mattermost/mattermost-serverTime to revision 14 days
2026-06-01published 2026-05-18Package added to advisoryGHSA-v549-xx3c-6pc8CVE-2026-3637moderatenot named as affected when the advisory was published, now names github.com/mattermost/mattermost/server/v8Time to revision 14 days
Fri 29 May 2026· 1 change
2026-05-29published 2026-04-22Package added to advisoryGHSA-ffq5-qpvf-xq7xCVE-2026-42086moderatenot named as affected when the advisory was published, now names openc3Time to revision 37 days
Thu 28 May 2026· 1 change
2026-05-28published 2026-04-27Advisory withdrawnGHSA-c8g3-x47w-8q7pwhole advisoryhighwithdrawn 2026-05-28Time to revision 31 days
Wed 20 May 2026· 10 changes
2026-05-20published 2024-10-09Advisory fix version movedGHSA-pfr9-2p92-qrhqmoderatestated at publication 0.22.0, now states 0.22.1Time to revision 587 days
2026-05-20published 2023-06-14Package added to advisoryGHSA-5wfc-hjrc-gq87CVE-2023-34620highnot named as affected when the advisory was published, now names github.com/hjson/hjson-go/v4Time to revision 1,071 days
2026-05-20published 2023-06-14Package added to advisoryGHSA-5wfc-hjrc-gq87CVE-2023-34620highnot named as affected when the advisory was published, now names laktak/hjsonTime to revision 1,071 days
2026-05-20published 2026-04-09Package added to advisoryGHSA-69cc-cv78-qc8gCVE-2026-29129highnot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyoteTime to revision 41 days
2026-05-20published 2026-04-09Package added to advisoryGHSA-95jq-rwvf-vjx4CVE-2026-29145criticalnot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyote-ffmTime to revision 41 days
2026-05-20published 2024-12-17Package added to advisoryGHSA-653p-vg55-5652CVE-2024-54677moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcatTime to revision 519 days
2026-05-20published 2020-06-15Package added to advisoryGHSA-qcxh-w3j9-58qrCVE-2019-0199highnot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyoteDuration unknown
2026-05-20published 2026-04-09Package added to advisoryGHSA-24j9-x2wg-9qv6CVE-2026-34500moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyote-ffmTime to revision 40 days
2026-05-20published 2026-03-31Package added to advisoryGHSA-rvhj-8chj-8v3cCVE-2026-0596criticalnot named as affected when the advisory was published, now names mlflowTime to revision 49 days
2026-05-20published 2026-04-16Advisory severity changedGHSA-v92g-xgxw-vvmmCVE-2026-41205whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 33 days
Thu 14 May 2026· 5 changes
2026-05-14published 2022-05-17Advisory fix version movedGHSA-4j5j-58j7-6c3wCVE-2014-9706
pypidulwich
critical
stated at publication 0.9.9, now states 0.9.10Time to revision 1,459 days
2026-05-14published 2024-12-02Package added to advisoryGHSA-4cx5-89vm-833xCVE-2024-52800lownot named as affected when the advisory was published, now names org.verapdf:libraryTime to revision 528 days
2026-05-14published 2024-12-02Package added to advisoryGHSA-4cx5-89vm-833xCVE-2024-52800lownot named as affected when the advisory was published, now names org.verapdf:library-arlingtonTime to revision 528 days
2026-05-14published 2024-12-02Package added to advisoryGHSA-4cx5-89vm-833xCVE-2024-52800lownot named as affected when the advisory was published, now names org.verapdf:library-jakartaTime to revision 528 days
2026-05-14published 2022-05-14Advisory withdrawnGHSA-9848-v244-962pCVE-2012-1007whole advisorymoderatewithdrawn 2026-05-14Time to revision 1,461 days
Wed 13 May 2026· 1 change
2026-05-13published 2026-05-05Advisory severity changedGHSA-wv26-88m5-6h59CVE-2026-42875whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Time to revision 8 days
Tue 12 May 2026· 5 changes
2026-05-12published 2026-05-04Advisory severity changedGHSA-wppj-c6mr-83jjCVE-2026-44112whole advisorymoderatestated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 8 days
2026-05-12published 2026-04-25Advisory severity changedGHSA-c4qg-j8jg-42q5CVE-2026-44117whole advisorymoderatestated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 17 days
2026-05-12published 2026-04-25Advisory severity changedGHSA-hxvm-xjvf-93f3CVE-2026-44114whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 17 days
2026-05-12published 2026-04-17Advisory severity changedGHSA-xmxx-7p24-h892CVE-2026-43585whole advisorycriticalstated at publication HIGH, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 25 days
2026-05-12published 2026-04-13Advisory withdrawnGHSA-rp7w-624x-95qvwhole advisorymoderatewithdrawn 2026-05-12Time to revision 29 days
Mon 11 May 2026· 1 change
2026-05-11published 2026-02-03Advisory withdrawnGHSA-2r8f-cf6w-x5vqwhole advisoryhighwithdrawn 2026-05-11Time to revision 97 days
Fri 8 May 2026· 15 changes
2026-05-08published 2026-05-04Advisory severity changedGHSA-67wx-r9xr-x75xCVE-2026-41648whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Time to revision 4 days
2026-05-08published 2026-05-04Advisory severity changedGHSA-4m88-wxj4-9qj6CVE-2026-40251whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Time to revision 4 days
2026-05-08published 2026-05-04Advisory severity changedGHSA-r7w7-mmxr-47r9CVE-2026-40197whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Time to revision 4 days
2026-05-08published 2026-05-04Advisory severity changedGHSA-gc7j-g665-rxr9CVE-2026-40195whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Time to revision 4 days
2026-05-08published 2026-05-04Advisory severity changedGHSA-78fc-9688-w8xwCVE-2026-40076whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.Time to revision 4 days
2026-05-08published 2026-03-31Advisory severity changedGHSA-5h2w-qmfp-ggp6CVE-2026-41344whole advisorymoderatestated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 38 days
2026-05-08published 2026-04-07Advisory severity changedGHSA-767m-xrhc-fxm7CVE-2026-41359whole advisoryhighstated at publication LOW, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 31 days
2026-05-08published 2026-05-05Advisory severity changedGHSA-gwfr-jfjf-92vvCVE-2026-7317whole advisorylowstated at publication HIGH, now states LOWA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 3 days
2026-05-08published 2026-05-05Advisory severity changedGHSA-5mrq-x3x5-8v8fCVE-2026-40934whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Time to revision 3 days
2026-05-08published 2026-04-30Advisory severity changedGHSA-5vh4-rgv7-p9g4CVE-2026-39383whole advisorymoderatestated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.Time to revision 8 days
2026-05-08published 2026-04-30Advisory severity changedGHSA-5q7p-7jgv-ww56CVE-2026-40280whole advisoryhighstated at publication CRITICAL, now states HIGHA CVSS version was added; the existing vectors stayed the same.Time to revision 8 days
2026-05-08published 2026-04-29Advisory severity changedGHSA-q4q6-r8wh-5cghCVE-2026-34084whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Time to revision 9 days
2026-05-08published 2026-04-17Advisory severity changedGHSA-mr34-9552-qr95CVE-2026-41389whole advisorymoderatestated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 20 days
2026-05-08published 2023-11-27Advisory withdrawnGHSA-jpr7-q523-hx25whole advisoryhighwithdrawn 2026-05-08Time to revision 893 days
2026-05-08published 2024-03-02Advisory withdrawnGHSA-jr22-8qgm-4q87whole advisoryhighwithdrawn 2026-05-08Time to revision 798 days
Thu 7 May 2026· 8 changes
2026-05-07published 2025-08-08Package added to advisoryGHSA-hj95-mhgf-jxc4CVE-2025-30404criticalnot named as affected when the advisory was published, now names github.com/pytorch/executorchTime to revision 273 days
2026-05-07published 2025-08-08Package added to advisoryGHSA-xc7w-r669-48pfCVE-2025-54951criticalnot named as affected when the advisory was published, now names github.com/pytorch/executorchTime to revision 273 days
2026-05-07published 2026-03-16Package added to advisoryGHSA-6jj5-j4j8-8473CVE-2026-28499moderatenot named as affected when the advisory was published, now names github.com/vapor/leaf-kitTime to revision 52 days
2026-05-07published 2025-08-08Package added to advisoryGHSA-84m3-f99p-cqx5CVE-2025-30405criticalnot named as affected when the advisory was published, now names github.com/pytorch/executorchTime to revision 273 days
2026-05-07published 2025-08-08Package added to advisoryGHSA-9m39-3mf3-xwchCVE-2025-54949criticalnot named as affected when the advisory was published, now names github.com/pytorch/executorchTime to revision 273 days
2026-05-07published 2025-08-08Package added to advisoryGHSA-f9hx-c6jf-3qxmCVE-2025-54950criticalnot named as affected when the advisory was published, now names github.com/pytorch/executorchTime to revision 273 days
2026-05-07published 2025-07-11Package added to advisoryGHSA-h952-963h-rv99CVE-2025-30402highnot named as affected when the advisory was published, now names github.com/pytorch/executorchTime to revision 300 days
2026-05-07published 2026-05-07Advisory withdrawnGHSA-j7w6-vpvq-j3gmCVE-2026-44827whole advisoryhighwithdrawn 2026-05-07Time to revision 0 days

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →