Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

5,026 advisory changes · newest first · grouped by day

Counted changes, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Advisory, Which advisory was edited, by its GHSA id.	Package, The package the advisory names, and the registry it comes from.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 25 Mar 2026· 5 advisory changes
2026-03-25published 2026-03-01	Advisory fix version moved	GHSA-cpv7-q2wx-m8rwCVE-2026-28425	packagiststatamic/cms high	stated at publication 6.4.0, now states 6.7.2	Days to revision 25
2026-03-25published 2026-02-13	Advisory severity changed	GHSA-g433-pq76-6cmf	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 40
2026-03-25published 2026-03-03	Advisory severity changed	GHSA-f8mp-vj46-cq8vCVE-2026-32032	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 22
2026-03-25published 2026-03-03	Advisory severity changed	GHSA-jv6r-27ww-4gw4CVE-2026-32027	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 22
2026-03-25published 2026-03-17	Advisory severity changed	GHSA-6gx3-4362-rf54CVE-2026-32766	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 8
Fri 20 Mar 2026· 1 advisory change
2026-03-20published 2026-03-07	Advisory withdrawn	GHSA-6f6w-6j58-rq76CVE-2026-30916	whole advisorylow	withdrawn 2026-03-20	Days to revision 14
Thu 19 Mar 2026· 4 advisory changes
2026-03-19published 2026-02-24	Advisory fix version moved	GHSA-jxq9-79vj-rgvwCVE-2026-27593	packagiststatamic/cms critical	stated at publication 6.3.3, now states 6.7.1	Days to revision 23
2026-03-19published 2026-02-09	Advisory fix version moved	GHSA-87r5-mp6g-5w5jCVE-2026-1615	npmjsonpath high	stated at publication 1.2.1, now states 1.3.0	Days to revision 9
2026-03-19published 2026-03-03	Advisory severity changed	GHSA-9p38-94jf-hgjjCVE-2026-22179	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 16
2026-03-19published 2026-03-03	Advisory severity changed	GHSA-8mvx-p2r9-r375CVE-2026-22181	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 16
Tue 17 Mar 2026· 1 advisory change
2026-03-17published 2026-03-16	Advisory severity changed	GHSA-cc7p-2j3x-x7xfCVE-2026-32267	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 1
Fri 13 Mar 2026· 1 advisory change
2026-03-13published 2026-03-11	Package added to advisory	GHSA-8q2w-wr49-whqjCVE-2026-29777	go moderate	not named as affected when the advisory was published, now names github.com/traefik/traefik/v2	Days to revision 2
Thu 12 Mar 2026· 4 advisory changes
2026-03-12published 2026-03-10	Package added to advisory	GHSA-hhfx-wfvq-7g9cCVE-2026-26118	npm high	not named as affected when the advisory was published, now names @azure/mcp	Days to revision 2
2026-03-12published 2026-03-10	Package added to advisory	GHSA-hhfx-wfvq-7g9cCVE-2026-26118	pypi high	not named as affected when the advisory was published, now names msmcp-azure	Days to revision 2
2026-03-12published 2026-01-22	Advisory severity changed	GHSA-hx9q-6w63-j58vCVE-2025-67221	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 49
2026-03-12published 2026-03-12	Advisory severity changed	GHSA-g5xx-pwrp-g3fvCVE-2026-31860	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 0
Wed 11 Mar 2026· 3 advisory changes
2026-03-11published 2026-03-11	Advisory severity changed	GHSA-gv8f-wpm2-m5wrCVE-2026-31975	whole advisoryhigh	stated at publication CRITICAL, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 1
2026-03-11published 2026-03-11	Advisory severity changed	GHSA-fvwq-45qv-xvhvCVE-2026-31859	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 1
2026-03-11published 2026-02-20	Advisory severity changed	GHSA-gv8r-9rw9-9697	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Days to revision 19
Tue 10 Mar 2026· 3 advisory changes
2026-03-10published 2026-02-17	Advisory severity changed	GHSA-qrq5-wjgg-rvqwCVE-2026-28447	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 21
2026-03-10published 2026-02-18	Advisory severity changed	GHSA-v773-r54f-q32wCVE-2026-28392	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Days to revision 21
2026-03-10published 2026-03-09	Advisory severity changed	GHSA-726g-59wr-cj4cCVE-2026-25041	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 1
Mon 9 Mar 2026· 1 advisory change
2026-03-09published 2026-03-06	Advisory fix version moved	GHSA-ccj6-79j6-cq5qCVE-2026-30855	gogithub.com/tencent/weknora critical	stated at publication 0.3.1, now states 0.3.2	Days to revision 3
Fri 6 Mar 2026· 16 advisory changes
2026-03-06published 2025-07-10	Package added to advisory	GHSA-wr62-c79q-cv37CVE-2025-52520	maven high	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Days to revision 239
2026-03-06published 2025-07-10	Package added to advisory	GHSA-25xr-qj8w-c4vfCVE-2025-53506	maven high	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Days to revision 239
2026-03-06published 2025-07-10	Advisory severity changed	GHSA-wr62-c79q-cv37CVE-2025-52520	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 239
2026-03-06published 2025-07-10	Advisory severity changed	GHSA-25xr-qj8w-c4vfCVE-2025-53506	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 239
2026-03-06published 2026-02-24	Advisory severity changed	GHSA-78qv-3mpx-9cqqCVE-2026-27156	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 10
2026-03-06published 2026-03-05	Advisory severity changed	GHSA-595m-wc8g-6qgcCVE-2026-30247	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 1
2026-03-06published 2026-01-09	Advisory severity changed	GHSA-pcwc-3fw3-8cqvCVE-2026-22687	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 56
2026-03-06published 2026-03-02	Advisory severity changed	GHSA-xw4p-pw82-hqr7CVE-2026-28457	whole advisorymoderate	stated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.	Days to revision 3
2026-03-06published 2026-03-02	Advisory severity changed	GHSA-jmm5-fvh5-gf4pCVE-2026-28464	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Days to revision 3
2026-03-06published 2026-02-19	Advisory severity changed	GHSA-fh3f-q9qw-93j9CVE-2026-28479	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Days to revision 14
2026-03-06published 2026-02-18	Advisory severity changed	GHSA-5xfq-5mr7-426qCVE-2026-28482	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Days to revision 16
2026-03-06published 2026-02-18	Advisory severity changed	GHSA-xvhf-x56f-2hppCVE-2026-28463	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Days to revision 16
2026-03-06published 2026-03-03	Advisory severity changed	GHSA-7xhj-55q9-pc3mCVE-2026-28393	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Days to revision 2
2026-03-06published 2026-02-17	Advisory severity changed	GHSA-7vwx-582j-j332CVE-2026-28481	whole advisorymoderate	stated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.	Days to revision 16
2026-03-06published 2026-02-17	Advisory severity changed	GHSA-3m3q-x3gj-f79xCVE-2026-28465	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Days to revision 16
2026-03-06published 2026-02-17	Advisory severity changed	GHSA-xc7w-v5x6-cc87CVE-2026-29613	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Days to revision 16
Thu 5 Mar 2026· 1 advisory change
2026-03-05published 2026-03-04	Advisory severity changed	GHSA-79pf-vx4x-7jmmCVE-2026-29188	whole advisorycritical	stated at publication MODERATE, now states CRITICALCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 1
Wed 4 Mar 2026· 1 advisory change
2026-03-04published 2025-12-30	Advisory severity changed	GHSA-6rw7-vpxm-498pCVE-2025-15284	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 64
Fri 27 Feb 2026· 2 advisory changes
2026-02-27published 2026-02-12	Advisory severity changed	GHSA-435g-fcv3-8j26	whole advisorylow	stated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.	Days to revision 15
2026-02-27published 2025-07-31	Advisory severity changed	GHSA-2x45-7fc3-mxwqCVE-2025-45769	whole advisorylow	stated at publication HIGH, now states LOWA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 211
Tue 24 Feb 2026· 1 advisory change
2026-02-24published 2025-03-20	Package added to advisory	GHSA-j3wr-m6xh-64hgCVE-2024-12704	pypi high	not named as affected when the advisory was published, now names llama-index-core	Days to revision 341
Thu 19 Feb 2026· 2 advisory changes
2026-02-19published 2026-02-13	Package added to advisory	GHSA-rp46-r563-jrc7CVE-2025-33042	maven moderate	not named as affected when the advisory was published, now names org.apache.avro:avro-compiler	Days to revision 6
2026-02-19published 2025-10-16	Package added to advisory	GHSA-fwxx-wv44-7qfgCVE-2025-41253	maven high	not named as affected when the advisory was published, now names org.springframework.cloud:spring-cloud-gateway-server	Days to revision 126
Wed 18 Feb 2026· 2 advisory changes
2026-02-18published 2026-02-06	Advisory fix version moved	GHSA-2ww3-72rp-wpp4CVE-2026-25592	nugetmicrosoft.semantickernel.core critical	stated at publication 1.70.0, now states 1.71.0	Days to revision 12
2026-02-18published 2026-02-12	Advisory withdrawn	GHSA-gfmx-qqqh-f38q	whole advisoryhigh	withdrawn 2026-02-18	Days to revision 7
Tue 17 Feb 2026· 10 advisory changes
2026-02-17published 2025-12-04	Package added to advisory	GHSA-2cgv-28vr-rv6j	crates.io high	not named as affected when the advisory was published, now names libcrux-ml-dsa	Days to revision 75
2026-02-17published 2025-12-04	Package added to advisory	GHSA-2cgv-28vr-rv6j	crates.io high	not named as affected when the advisory was published, now names libcrux-ml-kem	Days to revision 75
2026-02-17published 2024-03-06	Advisory severity changed	GHSA-c2f9-4jmm-v45mCVE-2024-27917	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 713
2026-02-17published 2024-02-13	Advisory severity changed	GHSA-g74q-5xw3-j7q9CVE-2024-21386	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 735
2026-02-17published 2024-09-27	Advisory severity changed	GHSA-9h9q-qhxg-89xrCVE-2024-47186	whole advisorymoderate	stated at publication CRITICAL, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 508
2026-02-17published 2024-03-06	Advisory severity changed	GHSA-5pf6-2qwx-pxm2CVE-2024-28110	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 713
2026-02-17published 2024-03-06	Advisory severity changed	GHSA-f6g2-h7qv-3m5vCVE-2024-27923	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 713
2026-02-17published 2024-03-06	Advisory severity changed	GHSA-cgqf-3cq5-wvcjCVE-2024-28101	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 713
2026-02-17published 2024-03-06	Advisory severity changed	GHSA-3j27-563v-28wfCVE-2024-27934	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 713
2026-02-17published 2024-06-18	Advisory severity changed	GHSA-x4gp-pqpj-f43qCVE-2024-58262	whole advisorylow	stated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.	Days to revision 609
Fri 13 Feb 2026· 2 advisory changes
2026-02-13published 2026-02-03	Advisory severity changed	GHSA-6426-9fv3-65x8CVE-2026-1312	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 10
2026-02-13published 2025-03-04	Advisory withdrawn	GHSA-3jxr-23ph-c89g	whole advisoryhigh	withdrawn 2026-02-13	Days to revision 346
Thu 12 Feb 2026· 4 advisory changes
2026-02-12published 2026-01-20	Advisory fix version moved	GHSA-r8w2-w357-9pjvCVE-2025-64087	mavenfr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker critical	stated at publication 2.1.0, now states 2.2.0	Days to revision 8
2026-02-12published 2025-12-01	Advisory severity changed	GHSA-rcmh-qjqh-p98vCVE-2025-14874	whole advisoryhigh	stated at publication LOW, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 73
2026-02-12published 2026-01-16	Advisory severity changed	GHSA-vx9w-5cx4-9796CVE-2026-26217	whole advisorycritical	stated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.	Days to revision 27
2026-02-12published 2026-02-10	Advisory severity changed	GHSA-qvhc-9v3j-5rfwCVE-2026-21218	whole advisoryhigh	stated at publication LOW, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 2
Wed 11 Feb 2026· 1 advisory change
2026-02-11published 2019-06-06	Advisory severity changed	GHSA-w7q7-vjp8-7jv4	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
Mon 9 Feb 2026· 1 advisory change
2026-02-09published 2026-02-09	Advisory severity changed	GHSA-9f5h-mmq6-2x78CVE-2026-25496	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 0
Sat 7 Feb 2026· 1 advisory change
2026-02-07published 2026-02-05	Advisory severity changed	GHSA-x39w-8vm5-5m3pCVE-2026-25533	whole advisorymoderate	stated at publication CRITICAL, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 1
Fri 6 Feb 2026· 1 advisory change
2026-02-06published 2026-01-23	Advisory withdrawn	GHSA-3966-f6p6-2qr9CVE-2026-0775	whole advisoryhigh	withdrawn 2026-02-06	Days to revision 15
Thu 5 Feb 2026· 2 advisory changes
2026-02-05published 2026-01-20	Advisory severity changed	GHSA-4gpc-rhpj-9443CVE-2026-23733	whole advisorycritical	stated at publication MODERATE, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 16
2026-02-05published 2026-02-04	Advisory severity changed	GHSA-8wpc-j9q9-j5m2CVE-2026-25538	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 0
Wed 4 Feb 2026· 2 advisory changes
2026-02-04published 2024-06-11	Advisory severity changed	GHSA-v5gf-r78h-55q6CVE-2024-37301	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 603
2026-02-04published 2026-02-03	Advisory severity changed	GHSA-7h2j-956f-4vf2CVE-2026-25547	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 1
Tue 3 Feb 2026· 16 advisory changes
2026-02-03published 2026-02-02	Advisory fix version moved	GHSA-gc24-px2r-5qmfCVE-2026-25505	pypibambuddy critical	stated at publication 0.1.6.2, now states 0.1.7	Days to revision 1
2026-02-03published 2021-03-11	Advisory severity changed	GHSA-gmrf-99gw-vvwjCVE-2021-46876	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	not dated
2026-02-03published 2022-02-11	Advisory withdrawn	GHSA-76wf-9vgp-pj7w	whole advisorymoderate	withdrawn 2026-02-03	Days to revision 1,453
2026-02-03published 2022-06-17	Advisory withdrawn	GHSA-6692-8qqf-79jc	whole advisoryhigh	withdrawn 2026-02-03	Days to revision 1,328
2026-02-03published 2019-06-03	Advisory withdrawn	GHSA-3fc5-9x9m-vqc4	whole advisorycritical	withdrawn 2026-02-03	Days to revision 2,437
2026-02-03published 2024-05-30	Advisory withdrawn	GHSA-75mx-chcf-2q32	whole advisorymoderate	withdrawn 2026-02-03	Days to revision 614
2026-02-03published 2023-12-20	Advisory withdrawn	GHSA-mhpq-9638-x6pw	whole advisorymoderate	withdrawn 2026-02-03	Days to revision 776
2026-02-03published 2020-09-03	Advisory withdrawn	GHSA-4xf9-pgvv-xx67	whole advisorymoderate	withdrawn 2026-02-03	Days to revision 1,979
2026-02-03published 2019-06-06	Advisory withdrawn	GHSA-g95f-p29q-9xw4	whole advisorylow	withdrawn 2026-02-03	Days to revision 2,434
2026-02-03published 2026-01-26	Advisory withdrawn	GHSA-p5wg-g6qr-c7cgCVE-2025-50537	whole advisorymoderate	withdrawn 2026-02-03	Days to revision 8
2026-02-03published 2021-12-16	Advisory withdrawn	GHSA-74r6-grj9-8rq6	whole advisorycritical	withdrawn 2026-02-03	Days to revision 1,510
2026-02-03published 2024-04-10	Advisory withdrawn	GHSA-3f95-mxq2-2f63	whole advisoryhigh	withdrawn 2026-02-03	Days to revision 664
2026-02-03published 2023-03-12	Advisory withdrawn	GHSA-89p3-9j8c-fqh4	whole advisorymoderate	withdrawn 2026-02-03	Days to revision 1,060
2026-02-03published 2022-03-16	Advisory withdrawn	GHSA-chr6-386q-4m3v	whole advisorymoderate	withdrawn 2026-02-03	Days to revision 1,421
2026-02-03published 2025-12-18	Advisory withdrawn	GHSA-46j5-6fg5-4gv3	whole advisorymoderate	withdrawn 2026-02-03	Days to revision 47
2026-02-03published 2021-10-27	Advisory withdrawn	GHSA-j8fq-86c5-5v2r	whole advisorycritical	withdrawn 2026-02-03	Days to revision 1,560
Mon 2 Feb 2026· 6 advisory changes
2026-02-02published 2024-03-15	Package added to advisory	GHSA-qmgx-j96g-4428CVE-2024-28752	maven critical	not named as affected when the advisory was published, now names org.apache.cxf:cxf-rt-databinding-aegis	Days to revision 689
2026-02-02published 2025-12-12	Package added to advisory	GHSA-vx9q-rhv9-3jvgCVE-2025-67721	maven high	not named as affected when the advisory was published, now names io.airlift:aircompressor	Days to revision 52
2026-02-02published 2024-06-04	Advisory withdrawn	GHSA-2hfw-w739-p7x5	whole advisorycritical	withdrawn 2026-02-02	Days to revision 608
2026-02-02published 2021-09-08	Advisory withdrawn	GHSA-c7vg-w8q8-c3wf	whole advisorymoderate	withdrawn 2026-02-02	Days to revision 1,608
2026-02-02published 2022-12-28	Advisory withdrawn	GHSA-4348-x292-h437	whole advisorylow	withdrawn 2026-02-02	Days to revision 1,133
2026-02-02published 2023-03-12	Advisory withdrawn	GHSA-c737-jhwr-fqxj	whole advisorymoderate	withdrawn 2026-02-02	Days to revision 1,059
Thu 29 Jan 2026· 2 advisory changes
2026-01-29published 2026-01-29	Advisory severity changed	GHSA-r277-3xc5-c79vCVE-2026-24780	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 0
2026-01-29published 2025-10-16	Advisory severity changed	GHSA-9329-mxxw-qwf8CVE-2025-53092	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 104
Fri 23 Jan 2026· 4 advisory changes
2026-01-23published 2026-01-22	Advisory fix version moved	GHSA-j8hf-cp34-g4j7CVE-2026-24124	god7y.io/dragonfly/v2 high	stated at publication 2.4.0, now states 2.4.1	Days to revision 1
2026-01-23published 2021-06-23	Advisory severity changed	GHSA-5gjg-jgh4-gppmCVE-2021-4236	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2026-01-23published 2022-02-10	Advisory severity changed	GHSA-v3mr-gp7j-pw5w	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	not dated
2026-01-23published 2025-11-13	Advisory withdrawn	GHSA-4249-gjr8-jpq3	whole advisoryhigh	withdrawn 2026-01-23	Days to revision 71

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →