Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

5,026 advisory changes · newest first · grouped by day

SinceClear the filter
ChangedSourceRows
Counted changes, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindAdvisory, Which advisory was edited, by its GHSA id.Package, The package the advisory names, and the registry it comes from.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Mon 19 Sep 2022· 35 advisory changes
2022-09-19published 2022-09-16Advisory severity changedGHSA-w62h-8xjm-fv49CVE-2022-35987whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-mgmh-g2v6-mqw5CVE-2022-35941whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-9cr2-8pwr-fhfqCVE-2022-36026whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-m6cv-4fmf-66xfCVE-2022-36018whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-9j4v-pp28-mxv7CVE-2022-36019whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-pxrw-j2fv-hx3hCVE-2022-35937whole advisoryhighstated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-f4w6-h4f5-wx45CVE-2022-35934whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-97p7-w86h-vcf9CVE-2022-35935whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-g35r-369w-3fqpCVE-2022-35970whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-q2c3-jpmc-gfjxCVE-2022-35969whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-2475-53vw-vp25CVE-2022-35968whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-v6h3-348g-6h5xCVE-2022-35967whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-4w68-4x85-mjj9CVE-2022-35966whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-qxpx-j395-pw36CVE-2022-35965whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-f7r5-q7cx-h668CVE-2022-35964whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-84jm-4cf3-9jfmCVE-2022-35963whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-fhfc-2q7x-929fCVE-2022-35994whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-q5jv-m6qw-5g37CVE-2022-35996whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-qhw4-wwr7-gjc5CVE-2022-35998whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-fqxc-pvf8-2w9vCVE-2022-36000whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-jqm7-m5q7-3hm5CVE-2022-36001whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-mh3m-62v7-68xgCVE-2022-36002whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-828c-5j5q-vrjqCVE-2022-36013whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-fv43-93gv-vm8fCVE-2022-36011whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-cv2p-32v3-vhwqCVE-2022-36003whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-r26c-679w-mrjmCVE-2022-36005whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-g9h5-vr8m-x2h4CVE-2022-35995whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-mv8m-8x97-937qCVE-2022-36004whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-7j3m-8g3c-9qqqCVE-2022-36014whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-jvhc-5hhr-w3v5CVE-2022-36012whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-79h2-q768-fpxrCVE-2022-36027whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-p7hr-f446-x6qfCVE-2022-35997whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-37jf-mjv6-xfqwCVE-2022-35999whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-19published 2022-09-16Advisory severity changedGHSA-74w3-p89x-ffghwhole advisorylowstated at publication CRITICAL, now states LOWThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 3
2022-09-19published 2022-09-16Advisory withdrawnGHSA-74w3-p89x-ffghwhole advisorylowwithdrawn 2022-09-19Days to revision 3
Fri 16 Sep 2022· 6 advisory changes
2022-09-16published 2022-09-14Advisory severity changedGHSA-4wjj-jwc9-2x96CVE-2022-2989whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-16published 2022-09-14Advisory severity changedGHSA-fmq7-gh8v-mjvcCVE-2022-1278whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 3
2022-09-16published 2022-09-13Advisory severity changedGHSA-wxx5-w9jc-48wxCVE-2022-37767whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 4
2022-09-16published 2022-09-12Advisory severity changedGHSA-fj2m-w3wv-x9prCVE-2022-39135whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 5
2022-09-16published 2022-09-10Advisory severity changedGHSA-9vm3-r8gq-cr6xCVE-2022-38638whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 7
2022-09-16published 2022-09-14Advisory severity changedGHSA-fjm8-m7m6-2fjpCVE-2022-2990whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 3
Thu 15 Sep 2022· 2 advisory changes
2022-09-15published 2022-09-07Package added to advisoryGHSA-jj62-mc3m-j769CVE-2020-21516criticalnot named as affected when the advisory was published, now names feehi/cmsDays to revision 9
2022-09-15published 2022-09-15Advisory severity changedGHSA-m77f-652q-wwp4CVE-2022-3212whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 1
Wed 14 Sep 2022· 1 advisory change
2022-09-14published 2021-01-04Advisory severity changedGHSA-4w2v-q235-vp99CVE-2020-28168whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 618
Sun 11 Sep 2022· 3 advisory changes
2022-09-11published 2021-08-25Package added to advisoryGHSA-69fv-gw6g-8ccgCVE-2018-20998criticalnot named as affected when the advisory was published, now names arrayfireDays to revision 381
2022-09-11published 2022-09-01Advisory severity changedGHSA-qf7j-25g9-r63fCVE-2022-36058whole advisoryhighstated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 9
2022-09-11published 2022-08-31Advisory severity changedGHSA-jhjh-776m-4765CVE-2022-31152whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 10
Fri 9 Sep 2022· 3 advisory changes
2022-09-09published 2021-05-07Advisory fix version movedGHSA-cgc7-mwp4-3ccxCVE-2020-15930
npmjoplin
moderate
stated at publication 1.0.246, now states 1.1.7Days to revision 490
2022-09-09published 2020-09-11Advisory fix version movedGHSA-p82g-2xpp-m5r3CVE-2015-5654
npmdojo
moderate
stated at publication 1.2.0, now states 1.9.1Days to revision 728
2022-09-09published 2021-05-17Package added to advisoryGHSA-jqh7-w5pr-cr56CVE-2020-8176moderatenot named as affected when the advisory was published, now names @shopify/koa-shopify-authDays to revision 480
Thu 8 Sep 2022· 6 advisory changes
2022-09-08published 2022-08-26Advisory severity changedGHSA-7527-8855-9cf8CVE-2022-2255whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 14
2022-09-08published 2022-07-15Advisory severity changedGHSA-339q-62wm-c39wCVE-2021-3859whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 55
2022-09-08published 2022-05-24Advisory severity changedGHSA-rhgr-952r-6p8qCVE-2022-29599whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 108
2022-09-08published 2022-04-27Advisory severity changedGHSA-4pc7-vqv5-5r3vCVE-2021-3827whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 134
2022-09-08published 2021-11-08Advisory severity changedGHSA-862g-9h5m-m3qvCVE-2021-3917whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 304
2022-09-08published 2020-12-14Advisory severity changedGHSA-hfvc-g252-rp4gCVE-2020-7791whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 633
Wed 7 Sep 2022· 1 advisory change
2022-09-07published 2021-09-15Package added to advisoryGHSA-5vp3-v4hc-gx76CVE-2021-41264criticalnot named as affected when the advisory was published, now names @openzeppelin/contracts-upgradeableDays to revision 357
Tue 6 Sep 2022· 2 advisory changes
2022-09-06published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.win-arm64Days to revision 105
2022-09-06published 2022-03-18Advisory severity changedGHSA-8v3j-jfg3-v3fvCVE-2021-44908whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 173
Fri 2 Sep 2022· 2 advisory changes
2022-09-02published 2022-05-24Advisory fix version movedGHSA-xr8f-59pp-rxxhCVE-2019-1302
nugetmicrosoft.aspnetcore.spaservices
moderate
stated at publication 2.1.2, now states 2.1.13Days to revision 101
2022-09-02published 2022-05-24Advisory fix version movedGHSA-xr8f-59pp-rxxhCVE-2019-1302
nugetmicrosoft.aspnetcore.spaservices
moderate
stated at publication 2.2.1, now states 2.2.7Days to revision 101
Thu 1 Sep 2022· 7 advisory changes
2022-09-01published 2022-06-17Package added to advisoryGHSA-r7pq-3x6p-7jcmCVE-2022-29863highnot named as affected when the advisory was published, now names opcfoundation.netstandard.opc.ua.coreDays to revision 76
2022-09-01published 2022-06-17Package added to advisoryGHSA-vhfw-v69p-crcwCVE-2022-29864highnot named as affected when the advisory was published, now names opcfoundation.netstandard.opc.ua.coreDays to revision 76
2022-09-01published 2022-06-17Package added to advisoryGHSA-fvxf-r9fw-49pcCVE-2022-29865highnot named as affected when the advisory was published, now names opcfoundation.netstandard.opc.ua.coreDays to revision 76
2022-09-01published 2022-06-17Package added to advisoryGHSA-6fp8-cxc9-4fr9CVE-2022-29866highnot named as affected when the advisory was published, now names opcfoundation.netstandard.opc.ua.coreDays to revision 76
2022-09-01published 2021-11-19Package added to advisoryGHSA-mjww-934m-h4jwCVE-2020-29457moderatenot named as affected when the advisory was published, now names opcfoundation.netstandard.opc.ua.coreDays to revision 286
2022-09-01published 2022-06-17Package added to advisoryGHSA-5q2v-6j86-5h9vCVE-2022-29862highnot named as affected when the advisory was published, now names opcfoundation.netstandard.opc.ua.coreDays to revision 76
2022-09-01published 2022-08-24Advisory severity changedGHSA-mw9h-hcp7-fgc6CVE-2022-33916whole advisorymoderatestated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 9
Fri 26 Aug 2022· 12 advisory changes
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.appDays to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-armDays to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-arm64Days to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-musl-arm64Days to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-musl-x64Days to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-x64Days to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.osx-x64Days to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.win-armDays to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.win-x64Days to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.win-x86Days to revision 94
2022-08-26published 2022-05-24Package added to advisoryGHSA-hxrm-9w7p-39ccCVE-2020-1045highnot named as affected when the advisory was published, now names microsoft.owinDays to revision 94
2022-08-26published 2022-08-18Advisory severity changedGHSA-mjvm-mhgc-q4gpCVE-2022-36008whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 8
Tue 23 Aug 2022· 1 advisory change
2022-08-23published 2022-08-10Advisory fix version movedGHSA-9jmq-rx5f-8jwqCVE-2021-32862
pypinbconvert
moderate
stated at publication 6.3, now states 6.5.1Days to revision 13
Mon 22 Aug 2022· 6 advisory changes
2022-08-22published 2022-08-10Advisory severity changedGHSA-9jmq-rx5f-8jwqCVE-2021-32862whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 12
2022-08-22published 2021-03-19Advisory severity changedGHSA-jgwr-3qm3-26f3CVE-2021-25329whole advisoryhighstated at publication CRITICAL, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 521
2022-08-22published 2021-01-21Advisory severity changedGHSA-5p3x-r448-pc62CVE-2021-21239whole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.Days to revision 578
2022-08-22published 2022-07-26Advisory severity changedGHSA-fw3v-x4f2-v673CVE-2022-34749whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 16
2022-08-22published 2022-06-08Advisory withdrawnGHSA-vv7q-mfpc-qgm5CVE-2022-31279whole advisorycriticalwithdrawn 2022-08-22Days to revision 76
2022-08-22published 2022-04-09Advisory withdrawnGHSA-86r3-4gq8-xw8qCVE-2021-43503whole advisorycriticalwithdrawn 2022-08-22Days to revision 136
Tue 16 Aug 2022· 1 advisory change
2022-08-16published 2022-07-22Advisory severity changedGHSA-mhxj-85r3-2x55CVE-2022-36313whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 26
Mon 15 Aug 2022· 6 advisory changes
2022-08-15published 2022-08-11Advisory severity changedGHSA-33wh-w4m7-c6r8CVE-2022-35956whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 4
2022-08-15published 2022-08-10Advisory severity changedGHSA-7qqq-gh2f-wq76CVE-2022-25907whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 6
2022-08-15published 2022-08-06Advisory severity changedGHSA-rqmg-hrg4-fm69CVE-2022-37450whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 10
2022-08-15published 2021-09-23Advisory severity changedGHSA-fpv6-f8jw-rc3rCVE-2021-41088whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 326
2022-08-15published 2021-08-31Advisory severity changedGHSA-2h3h-q99f-3fhcCVE-2021-39134whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 349
2022-08-15published 2021-05-06Advisory severity changedGHSA-46f2-3v63-3xrpCVE-2021-28966whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 466
Fri 12 Aug 2022· 1 advisory change
2022-08-12published 2022-02-09Package added to advisoryGHSA-jh6m-3pqw-242hCVE-2020-14359highnot named as affected when the advisory was published, now names github.com/keycloak/keycloak-gatekeeperDays to revision 185
Thu 11 Aug 2022· 5 advisory changes
2022-08-11published 2022-07-15Advisory severity changedGHSA-44vr-rwwj-p88hCVE-2022-31180whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 27
2022-08-11published 2022-07-15Advisory severity changedGHSA-jjc5-fp7p-6f8wCVE-2022-31179whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 27
2022-08-11published 2022-01-06Advisory severity changedGHSA-pccr-q7v9-5f27CVE-2021-44548whole advisorycriticalstated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 217
2022-08-11published 2021-12-16Advisory severity changedGHSA-cxg7-84wp-8pcqCVE-2021-4117whole advisorymoderatestated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.Days to revision 238
2022-08-11published 2021-01-29Advisory severity changedGHSA-hgmg-hhc8-g5wrCVE-2021-21254whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 559

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →