Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

5,026 advisory changes · newest first · grouped by day

SinceClear the filter
ChangedSourceRows
Counted changes, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindAdvisory, Which advisory was edited, by its GHSA id.Package, The package the advisory names, and the registry it comes from.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 29 Jun 2022· 2 advisory changes
2022-06-29published 2022-06-17Advisory severity changedGHSA-rc57-9r3x-98cqCVE-2021-41411whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 13
2022-06-29published 2021-06-18Advisory severity changedGHSA-hpr6-f4vq-mxchCVE-2021-32090whole advisorycriticalstated at publication MODERATE, now states CRITICALA CVSS version was added; the existing vectors stayed the same.Days to revision 376
Tue 28 Jun 2022· 1 advisory change
2022-06-28published 2022-06-24Advisory withdrawnGHSA-rwqr-c348-m5wrCVE-2022-33124whole advisorymoderatewithdrawn 2022-06-28Days to revision 5
Fri 24 Jun 2022· 1 advisory change
2022-06-24published 2022-06-16Advisory severity changedGHSA-58jx-f5rf-qgqfCVE-2021-33036whole advisoryhighstated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 9
Thu 23 Jun 2022· 4 advisory changes
2022-06-23published 2022-06-15Advisory severity changedGHSA-38j3-6fm8-pfgcCVE-2021-40660whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 9
2022-06-23published 2022-06-14Advisory severity changedGHSA-rmpj-7c96-mrg8CVE-2021-37404whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 10
2022-06-23published 2022-06-17Advisory severity changedGHSA-r45x-ghr2-qjxcwhole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 7
2022-06-23published 2022-06-17Advisory withdrawnGHSA-r45x-ghr2-qjxcwhole advisoryhighwithdrawn 2022-06-23Days to revision 7
Tue 21 Jun 2022· 1 advisory change
2022-06-21published 2022-03-08Advisory severity changedGHSA-w749-p3v6-hccqCVE-2022-21831whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 105
Mon 20 Jun 2022· 2 advisory changes
2022-06-20published 2022-06-11Advisory severity changedGHSA-xvf7-4v9q-58w6CVE-2022-25851whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 10
2022-06-20published 2022-06-17Advisory severity changedGHSA-rh9j-f5f8-rvgcCVE-2022-31083whole advisoryhighstated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 3
Fri 17 Jun 2022· 5 advisory changes
2022-06-17published 2021-11-30Package added to advisoryGHSA-fwf6-rw69-hhj4CVE-2021-23654moderatenot named as affected when the advisory was published, now names html-to-csvDays to revision 199
2022-06-17published 2021-04-13Package added to advisoryGHSA-53xj-v576-3ch2CVE-2019-10802criticalnot named as affected when the advisory was published, now names gitingDays to revision 430
2022-06-17published 2021-08-31Advisory severity changedGHSA-gmw6-94gg-2rc2CVE-2021-39135whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 290
2022-06-17published 2021-04-13Advisory severity changedGHSA-53xj-v576-3ch2CVE-2019-10802whole advisorycriticalstated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 430
2022-06-17published 2022-06-09Advisory severity changedGHSA-r48q-9g5r-8q2hCVE-2022-1996whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 9
Wed 15 Jun 2022· 2 advisory changes
2022-06-15published 2022-06-07Advisory severity changedGHSA-pp3c-cf6j-m3ffCVE-2022-29631whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 9
2022-06-15published 2022-06-08Advisory severity changedGHSA-vv7q-mfpc-qgm5CVE-2022-31279whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 8
Tue 14 Jun 2022· 18 advisory changes
2022-06-14published 2021-08-25Package added to advisoryGHSA-458v-4hrf-g3m4CVE-2020-35920moderatenot named as affected when the advisory was published, now names net2Days to revision 293
2022-06-14published 2021-08-25Advisory severity changedGHSA-f3fg-5j9p-vchcCVE-2021-31153whole advisorylowstated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.Days to revision 293
2022-06-14published 2021-08-25Advisory severity changedGHSA-83r8-p8v6-6gfmwhole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 293
2022-06-14published 2021-08-25Advisory severity changedGHSA-8892-84wf-cg8fwhole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 293
2022-06-14published 2021-08-25Advisory severity changedGHSA-jf43-3v8j-qwwrwhole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 293
2022-06-14published 2021-08-25Advisory severity changedGHSA-m9m5-cg5h-r582CVE-2020-35926whole advisorymoderatestated at publication CRITICAL, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 293
2022-06-14published 2021-08-25Advisory severity changedGHSA-vhfr-v4w9-45v8CVE-2019-16142whole advisorycriticalstated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 293
2022-06-14published 2021-08-25Advisory severity changedGHSA-7j44-fv4x-79g9CVE-2019-16141whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 293
2022-06-14published 2021-08-25Advisory severity changedGHSA-gq4h-f254-7cw9whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 293
2022-06-14published 2021-08-25Advisory severity changedGHSA-m296-j53x-xv95whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 293
2022-06-14published 2022-06-03Advisory severity changedGHSA-xhp9-4947-rq78CVE-2022-31799whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 12
2022-06-14published 2022-06-03Advisory severity changedGHSA-4qf6-vpj8-p4r6CVE-2022-30349whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 12
2022-06-14published 2022-06-03Advisory severity changedGHSA-6xj9-hpq3-w3qwCVE-2022-30506whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 12
2022-06-14published 2022-06-03Advisory severity changedGHSA-526x-rm7j-v389CVE-2022-30324whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 12
2022-06-14published 2022-06-03Advisory severity changedGHSA-fp36-299x-pwmwCVE-2022-1929whole advisoryhighstated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 12
2022-06-14published 2022-06-03Advisory severity changedGHSA-fj34-jhjx-xmvvCVE-2021-33473whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 12
2022-06-14published 2022-06-03Advisory severity changedGHSA-2927-hv3p-f3vpCVE-2022-29718whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 12
2022-06-14published 2021-08-25Advisory severity changedGHSA-r88h-6987-g79fwhole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 293
Fri 10 Jun 2022· 10 advisory changes
2022-06-10published 2022-05-21Package added to advisoryGHSA-wm7h-9275-46v2CVE-2022-24434highnot named as affected when the advisory was published, now names org.webjars.npm:dicerDays to revision 20
2022-06-10published 2021-08-25Advisory severity changedGHSA-pfjq-935c-4895whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 289
2022-06-10published 2022-05-25Advisory severity changedGHSA-rf6q-vx79-mjxrCVE-2021-3629whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 17
2022-06-10published 2021-09-20Advisory severity changedGHSA-f6jp-j6w3-w9hmCVE-2021-41303whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 263
2022-06-10published 2022-05-27Advisory severity changedGHSA-c75v-2vq8-878fCVE-2021-4231whole advisorymoderatestated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 14
2022-06-10published 2022-05-26Advisory severity changedGHSA-5hqc-x78w-3cmwCVE-2022-29405whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 15
2022-06-10published 2022-05-25Advisory severity changedGHSA-hj57-j5cw-2mwpCVE-2022-1706whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 15
2022-06-10published 2022-05-22Advisory severity changedGHSA-fh55-vwjc-69c7CVE-2022-31267whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 19
2022-06-10published 2022-04-27Advisory severity changedGHSA-mm33-5vfq-3mm3CVE-2022-22577whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 43
2022-06-10published 2022-02-16Advisory severity changedGHSA-qc84-gqf4-9926CVE-2022-23639whole advisoryhighstated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 113
Thu 9 Jun 2022· 2 advisory changes
2022-06-09published 2021-04-27Advisory severity changedGHSA-35q2-47q7-3pc3CVE-2021-29469whole advisoryhighstated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 408
2022-06-09published 2021-01-29Advisory severity changedGHSA-vhhw-xjvf-wprrCVE-2021-23326whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 496
Wed 8 Jun 2022· 1 advisory change
2022-06-08published 2022-05-18Advisory withdrawnGHSA-mjqc-5c9x-xfccwhole advisorymoderatewithdrawn 2022-06-08Days to revision 22
Fri 3 Jun 2022· 5 advisory changes
2022-06-03published 2022-05-20Advisory severity changedGHSA-hp87-p4gw-j4gqCVE-2022-28948whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 15
2022-06-03published 2022-05-20Advisory severity changedGHSA-hh32-7344-cg2fCVE-2022-22978whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 15
2022-06-03published 2022-05-22Advisory severity changedGHSA-qx32-f6g6-fcfrCVE-2022-31259whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 13
2022-06-03published 2022-05-22Advisory severity changedGHSA-ffx3-8qvm-pq3jCVE-2022-31264whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 13
2022-06-03published 2022-05-22Advisory severity changedGHSA-2c65-rq62-fqhqCVE-2022-31268whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 13
Thu 2 Jun 2022· 4 advisory changes
2022-06-02published 2021-10-06Package added to advisoryGHSA-pfwg-rxf4-97c3CVE-2021-28125moderatenot named as affected when the advisory was published, now names apache-supersetDays to revision 239
2022-06-02published 2021-11-16Advisory severity changedGHSA-qg54-694p-wgppCVE-2021-41817whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 199
2022-06-02published 2022-04-26Advisory severity changedGHSA-6jmm-mp6w-4rrgCVE-2022-29546whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 37
2022-06-02published 2022-04-26Advisory severity changedGHSA-vx9g-377x-xwxqCVE-2022-27311whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 38
Wed 1 Jun 2022· 3 advisory changes
2022-06-01published 2022-05-20Advisory severity changedGHSA-x7f3-62pm-9p38CVE-2022-28946whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 13
2022-06-01published 2022-05-18Advisory severity changedGHSA-mjqc-5c9x-xfccwhole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 15
2022-06-01published 2022-05-18Advisory severity changedGHSA-c5wc-v287-82pcCVE-2022-30689whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 15
Fri 27 May 2022· 26 advisory changes
2022-05-27published 2022-04-20Advisory fix version movedGHSA-x2w5-725j-gf2gCVE-2022-22143
npmconvict
high
stated at publication 6.2.2, now states 6.2.3Days to revision 37
2022-05-27published 2022-04-05Advisory fix version movedGHSA-jj47-x69x-mxrmCVE-2022-24795
rubygemsyajl-ruby
moderate
stated at publication 1.4.2, now states 1.4.3Days to revision 52
2022-05-27published 2021-12-09Package added to advisoryGHSA-qrmm-w75w-3wpxmoderatenot named as affected when the advisory was published, now names swagger-ui-reactDays to revision 169
2022-05-27published 2022-05-17Advisory severity changedGHSA-qj93-37f5-mr29CVE-2021-33318whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 11
2022-05-27published 2020-05-26Advisory severity changedGHSA-8727-m6gj-mc37CVE-2020-8164whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 731
2022-05-27published 2020-05-26Advisory severity changedGHSA-m42x-37p3-fv5wCVE-2020-8162whole advisoryhighstated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 731
2022-05-27published 2020-07-07Advisory severity changedGHSA-cr3x-7m39-c6jqCVE-2020-8163whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 689
2022-05-27published 2020-07-06Advisory severity changedGHSA-5f9h-9pjv-v6j7CVE-2020-8161whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 690
2022-05-27published 2020-05-26Advisory severity changedGHSA-2p68-f74v-9wc6CVE-2020-8165whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 731
2022-05-27published 2020-09-02Advisory severity changedGHSA-pp7h-53gx-mx7rCVE-2020-8244whole advisorymoderatestated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 632
2022-05-27published 2022-02-15Advisory severity changedGHSA-h5rh-w6vm-9ghcCVE-2021-27358whole advisorymoderatestated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 102
2022-05-27published 2021-05-06Advisory severity changedGHSA-9m6j-fcg5-2442CVE-2021-27515whole advisorymoderatestated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 386
2022-05-27published 2021-02-05Advisory severity changedGHSA-f4hq-453j-p95fCVE-2021-3189whole advisorymoderatestated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 476
2022-05-27published 2021-03-01Advisory severity changedGHSA-p6j9-7xhc-rhwpCVE-2021-27516whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 452
2022-05-27published 2021-03-29Advisory severity changedGHSA-pq64-v7f5-gqh8CVE-2021-27291whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 424
2022-05-27published 2021-02-08Advisory severity changedGHSA-rrqm-p222-8ph2CVE-2021-21304whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 473
2022-05-27published 2021-09-20Advisory severity changedGHSA-rp65-9cf3-cjxrCVE-2021-3803whole advisoryhighstated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.Days to revision 249
2022-05-27published 2021-09-20Advisory severity changedGHSA-44c6-4v22-4mhxCVE-2021-3795whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 249
2022-05-27published 2021-11-19Advisory severity changedGHSA-896r-f27r-55mwCVE-2021-3918whole advisorycriticalstated at publication MODERATE, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 189
2022-05-27published 2021-09-27Advisory severity changedGHSA-3c9c-2p65-qvwvCVE-2021-41097whole advisorycriticalstated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 242
2022-05-27published 2022-05-05Advisory severity changedGHSA-6346-5r4h-ff5xCVE-2022-1555whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 23
2022-05-27published 2022-04-27Advisory severity changedGHSA-f32v-vf79-p29qCVE-2022-1466whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 31
2022-05-27published 2022-04-30Advisory severity changedGHSA-9hgc-wpc5-v8p9CVE-2022-1530whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 28
2022-05-27published 2022-05-03Advisory severity changedGHSA-jmhj-vh4q-hhmqCVE-2022-24902whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 25
2022-05-27published 2022-05-05Advisory severity changedGHSA-jf66-3q76-h5p5CVE-2022-1053whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 22
2022-05-27published 2022-04-26Advisory severity changedGHSA-phwq-j96m-2c2qCVE-2022-29078whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 32
Wed 25 May 2022· 2 advisory changes
2022-05-25published 2022-02-10Advisory fix version movedGHSA-h236-g5gh-vq6cCVE-2019-19935
npmfroala-editor
moderate
stated at publication 3.0.6, now states 3.2.3Days to revision 104
2022-05-25published 2018-10-17Advisory severity changedGHSA-4fq3-mr56-cg6rCVE-2018-1273whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 1,316
Sun 22 May 2022· 2 advisory changes
2022-05-22published 2022-03-11Package added to advisoryGHSA-9rr6-jpg7-9jg6CVE-2021-38296highnot named as affected when the advisory was published, now names pysparkDays to revision 73
2022-05-22published 2022-03-31Package added to advisoryGHSA-qg5x-66hp-cw5pCVE-2022-25598highnot named as affected when the advisory was published, now names apache-dolphinschedulerDays to revision 53
Tue 10 May 2022· 2 advisory changes
2022-05-10published 2022-05-03Advisory severity changedGHSA-qp49-3pvw-x4m5CVE-2022-29970whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 8
2022-05-10published 2022-04-29Advisory severity changedGHSA-h8pj-cxx2-jfg2CVE-2021-41945whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 12
Thu 5 May 2022· 3 advisory changes
2022-05-05published 2022-04-26Package added to advisoryGHSA-8wp2-vxpg-xcvpCVE-2022-1457criticalnot named as affected when the advisory was published, now names neorazorx/facturascriptsDays to revision 10
2022-05-05published 2021-04-07Advisory severity changedGHSA-gfr2-qpxh-qj9mCVE-2020-1735whole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.Days to revision 393
2022-05-05published 2022-04-23Advisory severity changedGHSA-g9hh-vvx3-v37vCVE-2022-28366whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 13
Wed 4 May 2022· 1 advisory change
2022-05-04published 2021-09-20Advisory severity changedGHSA-jgrx-mgxx-jf9vCVE-2021-3777whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 225
Tue 3 May 2022· 3 advisory changes
2022-05-03published 2022-04-03Package added to advisoryGHSA-6v73-fgf6-w5j7CVE-2022-22963criticalnot named as affected when the advisory was published, now names org.springframework.cloud:spring-cloud-function-contextDays to revision 31
2022-05-03published 2021-02-11Advisory severity changedGHSA-r3j7-x2g5-9gx6CVE-2021-27185whole advisorycriticalstated at publication MODERATE, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 445
2022-05-03published 2021-02-26Advisory severity changedGHSA-3rpf-5rqv-689qCVE-2021-26120whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 430

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →