Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

5,026 advisory changes · newest first · grouped by day

SinceClear the filter
ChangedSourceRows
Counted changes, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindAdvisory, Which advisory was edited, by its GHSA id.Package, The package the advisory names, and the registry it comes from.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Thu 11 Aug 2022· 10 advisory changes
2022-08-11published 2022-07-29Advisory severity changedGHSA-2cpx-6pqp-wf35CVE-2022-31183whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 13
2022-08-11published 2020-12-21Advisory severity changedGHSA-9f66-54xg-pc2cCVE-2020-26275whole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.Days to revision 598
2022-08-11published 2022-02-15Advisory severity changedGHSA-pf59-j7c2-rh6xCVE-2020-13597whole advisorymoderatestated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 178
2022-08-11published 2021-04-19Advisory severity changedGHSA-wmg4-8cp2-hpg9CVE-2021-29430whole advisoryhighstated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 479
2022-08-11published 2022-07-27Advisory severity changedGHSA-8274-h5jp-97vrCVE-2022-31109whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 14
2022-08-11published 2022-07-26Advisory severity changedGHSA-ww2v-frv5-pj5xCVE-2022-35131whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 16
2022-08-11published 2022-07-19Advisory severity changedGHSA-jxvf-m3x5-mxwqCVE-2020-28471whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 22
2022-08-11published 2020-07-07Advisory severity changedGHSA-93f3-23rq-pjfpCVE-2020-15095whole advisorymoderatestated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 764
2022-08-11published 2019-12-13Advisory severity changedGHSA-4328-8hgf-7wjrCVE-2019-16777whole advisoryhighstated at publication LOW, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 971
2022-08-11published 2019-12-13Advisory severity changedGHSA-x8qc-rrcw-4r46CVE-2019-16776whole advisoryhighstated at publication LOW, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 971
Wed 10 Aug 2022· 8 advisory changes
2022-08-10published 2022-07-19Package added to advisoryGHSA-4x9r-j582-cgr8CVE-2022-33891highnot named as affected when the advisory was published, now names pysparkDays to revision 23
2022-08-10published 2022-07-29Advisory severity changedGHSA-32ff-4g79-vgfcCVE-2022-31177whole advisorylowstated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.Days to revision 12
2022-08-10published 2022-07-23Advisory severity changedGHSA-5469-c5p2-xv5gCVE-2022-34113whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 19
2022-08-10published 2022-07-23Advisory severity changedGHSA-c2pj-rr68-pw94CVE-2022-34112whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 19
2022-08-10published 2021-10-12Advisory severity changedGHSA-qv95-g3gm-x542CVE-2021-41802whole advisorylowstated at publication MODERATE, now states LOWThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 302
2022-08-10published 2021-09-29Advisory severity changedGHSA-x55w-vjjp-222rCVE-2021-3820whole advisoryhighstated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.Days to revision 315
2022-08-10published 2021-09-13Advisory severity changedGHSA-cqqh-49mx-fq63CVE-2021-3645whole advisorycriticalstated at publication MODERATE, now states CRITICALCVSS versions were removed or replaced; no shared version's vector was rescored.Days to revision 331
2022-08-10published 2022-07-20Advisory severity changedGHSA-99j7-mhfh-w84pCVE-2022-31162whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 22
Fri 5 Aug 2022· 2 advisory changes
2022-08-05published 2022-05-24Package added to advisoryGHSA-cjw4-2w9r-r8mvCVE-2019-12410highnot named as affected when the advisory was published, now names pyarrowDays to revision 73
2022-08-05published 2022-07-18Advisory severity changedGHSA-4hq8-jgr8-mw9jCVE-2020-7641whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 19
Thu 4 Aug 2022· 1 advisory change
2022-08-04published 2022-02-11Package added to advisoryGHSA-6qq8-5wq3-86rpCVE-2020-15129moderatenot named as affected when the advisory was published, now names github.com/containous/traefik/v2/pkg/apiDays to revision 174
Wed 3 Aug 2022· 1 advisory change
2022-08-03published 2020-08-31Advisory fix version movedGHSA-4mv4-gmmf-q382CVE-2015-6584
npmdatatables
high
stated at publication 1.10.8, now states 1.10.10Days to revision 702
Tue 2 Aug 2022· 2 advisory changes
2022-08-02published 2021-05-18Advisory severity changedGHSA-58pf-pcwv-qg85CVE-2020-7665whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 441
2022-08-02published 2019-12-02Advisory severity changedGHSA-6xc2-mj39-q599CVE-2019-18818whole advisorycriticalstated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 974
Fri 29 Jul 2022· 8 advisory changes
2022-07-29published 2022-02-11Package added to advisoryGHSA-6qq8-5wq3-86rpCVE-2020-15129moderatenot named as affected when the advisory was published, now names github.com/containous/traefik/v2Days to revision 168
2022-07-29published 2021-04-20Advisory severity changedGHSA-6757-jp84-gxfxCVE-2020-1747whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.Days to revision 465
2022-07-29published 2022-07-15Advisory severity changedGHSA-rpxg-hg79-h8q9CVE-2022-35628whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 14
2022-07-29published 2022-07-14Advisory severity changedGHSA-6w2f-6wq3-rjvfCVE-2022-32065whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 16
2022-07-29published 2020-11-24Advisory severity changedGHSA-vfrc-7r7c-w9mxCVE-2020-26237whole advisorymoderatestated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 612
2022-07-29published 2019-10-15Advisory severity changedGHSA-c427-hjc3-wrfwCVE-2019-17495whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.Days to revision 1,018
2022-07-29published 2022-07-15Advisory severity changedGHSA-j3h2-8mf8-j5r2CVE-2015-8031whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 14
2022-07-29published 2022-07-23Advisory severity changedGHSA-m7gr-5w5g-36jfCVE-2022-34037whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 7
Tue 26 Jul 2022· 1 advisory change
2022-07-26published 2022-05-14Package added to advisoryGHSA-2xjx-v99w-gqf3CVE-2019-0545highnot named as affected when the advisory was published, now names microsoft.netcore.appDays to revision 74
Fri 22 Jul 2022· 3 advisory changes
2022-07-22published 2022-07-16Advisory severity changedGHSA-4wf5-vphf-c2xcCVE-2022-25858whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 7
2022-07-22published 2022-07-14Advisory severity changedGHSA-227g-7cvv-6ff3CVE-2022-31781whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 9
2022-07-22published 2022-07-17Advisory severity changedGHSA-fr75-x856-q6j8CVE-2021-36711whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 6
Thu 21 Jul 2022· 2 advisory changes
2022-07-21published 2022-04-26Advisory severity changedGHSA-75p6-52g3-rqc8CVE-2022-1245whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 86
2022-07-21published 2022-06-16Advisory withdrawnGHSA-cqpr-pcm7-m3jcwhole advisorymoderatewithdrawn 2022-07-21Days to revision 35
Wed 20 Jul 2022· 3 advisory changes
2022-07-20published 2022-07-09Advisory severity changedGHSA-8rq8-f485-7v8xCVE-2022-35411whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 12
2022-07-20published 2020-12-08Advisory severity changedGHSA-g3h8-cg9x-47qwCVE-2020-26255whole advisorymoderatestated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 589
2022-07-20published 2022-07-13Advisory severity changedGHSA-7488-6x3r-23w5CVE-2022-31507whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 7
Tue 19 Jul 2022· 2 advisory changes
2022-07-19published 2022-07-15Advisory severity changedGHSA-8mjr-jr5h-q2xrCVE-2022-31153whole advisorymoderatestated at publication CRITICAL, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 4
2022-07-19published 2022-07-09Advisory severity changedGHSA-5jgj-h9wp-53frCVE-2022-32115whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 11
Sat 16 Jul 2022· 4 advisory changes
2022-07-16published 2022-07-06Package added to advisoryGHSA-f2gr-7299-487hmoderatenot named as affected when the advisory was published, now names github.com/ipfs/go-ipfsDays to revision 9
2022-07-16published 2021-08-30Package added to advisoryGHSA-7774-7vr3-cc8jCVE-2021-39155highnot named as affected when the advisory was published, now names istio.io/istioDays to revision 320
2022-07-16published 2022-06-17Package added to advisoryGHSA-75rw-34q6-72crCVE-2022-31053criticalnot named as affected when the advisory was published, now names github.com/biscuit-auth/biscuit-goDays to revision 29
2022-07-16published 2021-09-02Package added to advisoryGHSA-7h6j-2268-fhcmCVE-2020-9321moderatenot named as affected when the advisory was published, now names github.com/traefik/traefikDays to revision 316
Fri 15 Jul 2022· 6 advisory changes
2022-07-15published 2022-07-07Advisory severity changedGHSA-h975-r69h-4w9pCVE-2022-32533whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 9
2022-07-15published 2022-07-07Advisory severity changedGHSA-xj57-8qj4-c4m6CVE-2022-33980whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 9
2022-07-15published 2022-07-06Advisory severity changedGHSA-95f9-94vc-665hCVE-2022-31836whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 10
2022-07-15published 2022-07-06Advisory severity changedGHSA-8r94-4h3c-939fCVE-2022-2321whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 10
2022-07-15published 2022-07-05Advisory severity changedGHSA-wpqr-jcpx-745rCVE-2022-31116whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 10
2022-07-15published 2022-07-05Advisory severity changedGHSA-fm67-cv37-96ffCVE-2022-31117whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 10
Thu 14 Jul 2022· 2 advisory changes
2022-07-14published 2022-07-05Advisory severity changedGHSA-ffmh-x56j-9rc3CVE-2022-31147whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 9
2022-07-14published 2022-07-05Advisory severity changedGHSA-p64x-8rxx-wf6qCVE-2022-34265whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 10
Wed 13 Jul 2022· 8 advisory changes
2022-07-13published 2022-07-02Advisory severity changedGHSA-735f-pg76-fxc4CVE-2022-2274whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 12
2022-07-13published 2022-07-02Advisory severity changedGHSA-7mwh-4pqv-wmr8CVE-2022-25758whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 12
2022-07-13published 2022-07-01Advisory severity changedGHSA-2m4x-4q9j-w97gCVE-2022-33082whole advisoryhighstated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 13
2022-07-13published 2022-07-05Advisory severity changedGHSA-977c-63xq-cgw3CVE-2022-31115whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 8
2022-07-13published 2021-11-23Advisory severity changedGHSA-j4mv-2rv7-v2j9CVE-2021-22966whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 232
2022-07-13published 2021-09-02Advisory severity changedGHSA-wmpm-fq7r-jq56CVE-2021-23427whole advisorycriticalstated at publication HIGH, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 314
2022-07-13published 2022-01-08Advisory severity changedGHSA-mgpf-hhgf-cxg4CVE-2021-45457whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 187
2022-07-13published 2021-09-02Advisory severity changedGHSA-vpw5-grxx-v396CVE-2021-36793whole advisorymoderatestated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 314
Mon 11 Jul 2022· 21 advisory changes
2022-07-11published 2022-06-28Package added to advisoryGHSA-m43h-hfrq-x8wxCVE-2022-26477highnot named as affected when the advisory was published, now names systemdsDays to revision 14
2022-07-11published 2022-04-03Package added to advisoryGHSA-558x-2xjg-6232CVE-2022-22950moderatenot named as affected when the advisory was published, now names org.springframework:spring-expressionDays to revision 100
2022-07-11published 2018-10-16Package added to advisoryGHSA-jc8g-xhw5-6x46CVE-2018-0786highnot named as affected when the advisory was published, now names system.private.servicemodelDays to revision 1,364
2022-07-11published 2018-10-16Package added to advisoryGHSA-jc8g-xhw5-6x46CVE-2018-0786highnot named as affected when the advisory was published, now names system.servicemodel.duplexDays to revision 1,364
2022-07-11published 2018-10-16Package added to advisoryGHSA-jc8g-xhw5-6x46CVE-2018-0786highnot named as affected when the advisory was published, now names system.servicemodel.httpDays to revision 1,364
2022-07-11published 2018-10-16Package added to advisoryGHSA-jc8g-xhw5-6x46CVE-2018-0786highnot named as affected when the advisory was published, now names system.servicemodel.nettcpDays to revision 1,364
2022-07-11published 2018-10-16Package added to advisoryGHSA-jc8g-xhw5-6x46CVE-2018-0786highnot named as affected when the advisory was published, now names system.servicemodel.primitivesDays to revision 1,364
2022-07-11published 2018-10-16Package added to advisoryGHSA-jc8g-xhw5-6x46CVE-2018-0786highnot named as affected when the advisory was published, now names system.servicemodel.securityDays to revision 1,364
2022-07-11published 2018-10-16Package added to advisoryGHSA-mv2r-q4g5-j8q5CVE-2018-8269highnot named as affected when the advisory was published, now names microsoft.aspnetcore.allDays to revision 1,364
2022-07-11published 2018-10-16Package added to advisoryGHSA-mv2r-q4g5-j8q5CVE-2018-8269highnot named as affected when the advisory was published, now names microsoft.aspnetcore.dataprotection.azurestorageDays to revision 1,364
2022-07-11published 2017-10-24Package added to advisoryGHSA-qrgf-jqqm-x7xvCVE-2013-5671highnot named as affected when the advisory was published, now names fog-dragonflyDays to revision 1,721
2022-07-11published 2022-06-30Advisory severity changedGHSA-cxgw-r5jg-7xwqCVE-2022-2073whole advisoryhighstated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 12
2022-07-11published 2022-06-29Advisory severity changedGHSA-3j8f-xvm3-ffx4CVE-2022-0624whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 13
2022-07-11published 2022-06-29Advisory severity changedGHSA-pf6p-25r2-fx45CVE-2022-0085whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 13
2022-07-11published 2022-06-28Advisory severity changedGHSA-7f3x-x4pr-wqhjCVE-2022-2216whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 14
2022-07-11published 2022-06-28Advisory severity changedGHSA-cgrj-xjm7-9q27CVE-2022-33146whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 14
2022-07-11published 2022-06-28Advisory severity changedGHSA-4p35-cfcx-8653CVE-2022-0722whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 14
2022-07-11published 2022-06-28Advisory severity changedGHSA-jpp7-7chh-cf67CVE-2022-2218whole advisorymoderatestated at publication CRITICAL, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 14
2022-07-11published 2022-06-28Advisory severity changedGHSA-m43h-hfrq-x8wxCVE-2022-26477whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 14
2022-07-11published 2022-06-24Advisory severity changedGHSA-qx2j-85q5-ffp8CVE-2022-34296whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 18
2022-07-11published 2022-06-14Advisory severity changedGHSA-3885-8gqc-3wpfCVE-2022-30184whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 27
Wed 6 Jul 2022· 1 advisory change
2022-07-06published 2022-06-25Advisory severity changedGHSA-3jxh-6635-6jwpCVE-2022-30117whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 12
Tue 5 Jul 2022· 9 advisory changes
2022-07-05published 2022-06-17Advisory severity changedGHSA-x4mq-m75f-mx8mwhole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 19
2022-07-05published 2022-06-07Advisory severity changedGHSA-5c5f-7vfq-3732CVE-2022-32511whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 29
2022-07-05published 2022-06-24Advisory severity changedGHSA-5ww9-9qp2-x524CVE-2022-33127whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 12
2022-07-05published 2022-06-23Advisory severity changedGHSA-qmx3-m648-hr74CVE-2022-32549whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 13
2022-07-05published 2021-11-23Advisory severity changedGHSA-vpf5-82c8-9v36CVE-2021-23433whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 224
2022-07-05published 2021-03-19Advisory severity changedGHSA-qc65-cgvr-93p6CVE-2021-23356whole advisorycriticalstated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 473
2022-07-05published 2021-03-19Advisory severity changedGHSA-f38p-c2gq-4pmrCVE-2021-21267whole advisoryhighstated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 473
2022-07-05published 2021-03-08Advisory severity changedGHSA-fvcj-hvfw-7f2vCVE-2021-1725whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 484
2022-07-05published 2019-12-12Advisory severity changedGHSA-484f-743f-6jx2CVE-2019-16774whole advisorymoderatestated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 936
Wed 29 Jun 2022· 6 advisory changes
2022-06-29published 2021-05-21Advisory fix version movedGHSA-xg2h-wx96-xgxrCVE-2021-4238
gogithub.com/masterminds/goutils
low
stated at publication 1.0.2, now states 1.1.1Days to revision 404
2022-06-29published 2022-05-24Package added to advisoryGHSA-72gx-qq2m-6xr2CVE-2019-10431criticalnot named as affected when the advisory was published, now names org.jenkins-ci.plugins:script-securityDays to revision 36
2022-06-29published 2022-06-17Advisory severity changedGHSA-fr2w-mp56-g4xpCVE-2022-2111whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 13
2022-06-29published 2022-06-02Advisory severity changedGHSA-hj9c-8jmm-8c52CVE-2022-29244whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 27
2022-06-29published 2021-01-20Advisory severity changedGHSA-49wp-qq6x-g2rfCVE-2020-28482whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 525
2022-06-29published 2022-06-23Advisory severity changedGHSA-jvxx-v45p-v5vfCVE-2022-31110whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 7

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →