Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

5,026 advisory changes · newest first · grouped by day

SinceClear the filter
ChangedSourceRows
Counted changes, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindAdvisory, Which advisory was edited, by its GHSA id.Package, The package the advisory names, and the registry it comes from.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 2 Sep 2026· 6 changes
2026-09-02published 2026-05-06Advisory fix version movedGHSA-248h-974q-xrc2
mavencom.getaxonflow:axonflow-sdk
moderate
stated at publication 6.0.0, now states 7.0.0Time to revision 119 days
2026-09-02published 2025-03-20Advisory withdrawnGHSA-x757-hv69-jr45CVE-2024-7959whole advisoryhighwithdrawn 2026-09-02Time to revision 531 days
2026-09-02published 2025-03-20Advisory withdrawnGHSA-pqwr-phvv-v49fCVE-2024-7039whole advisoryhighwithdrawn 2026-09-02Time to revision 531 days
2026-09-02published 2025-03-20Advisory withdrawnGHSA-crh6-pj8c-xrhcCVE-2024-7034whole advisorymoderatewithdrawn 2026-09-02Time to revision 531 days
2026-09-02published 2025-03-20Advisory withdrawnGHSA-3p9q-7w63-3f8qCVE-2024-7033whole advisorymoderatewithdrawn 2026-09-02Time to revision 531 days
2026-09-02published 2024-10-09Advisory withdrawnGHSA-mq92-jr35-ffpcCVE-2024-7038whole advisorylowwithdrawn 2026-09-02Time to revision 693 days
Tue 1 Sep 2026· 3 changes
2026-09-01published 2026-06-16Package added to advisoryGHSA-5r4w-85f3-pw66CVE-2026-48491highnot named as affected when the advisory was published, now names github.com/traefik/traefik/v2Time to revision 77 days
2026-09-01published 2026-06-16Package added to advisoryGHSA-5r4w-85f3-pw66CVE-2026-48491highnot named as affected when the advisory was published, now names github.com/traefik/traefik/v3Time to revision 77 days
2026-09-01published 2025-12-01Advisory severity changedGHSA-569q-mpph-wgwwCVE-2025-71401whole advisoryhighstated at publication LOW, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 274 days
Mon 31 Aug 2026· 1 change
2026-08-31published 2026-05-12Package added to advisoryGHSA-r29c-68gh-xp6xCVE-2026-41293criticalnot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyoteTime to revision 111 days
Fri 28 Aug 2026· 2 changes
2026-08-28published 2026-06-12Advisory severity changedGHSA-9r4w-jg96-92mvCVE-2026-12681whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Time to revision 77 days
2026-08-28published 2026-07-02Advisory severity changedGHSA-77pv-3w4q-vrj5CVE-2026-53834whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 57 days
Wed 26 Aug 2026· 1 change
2026-08-26published 2026-02-25Advisory severity changedGHSA-wfx3-6g53-9fgcCVE-2026-56368whole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.Time to revision 182 days
Tue 25 Aug 2026· 1 change
2026-08-25published 2026-07-02Advisory severity changedGHSA-83w9-h5wv-j9xmCVE-2026-53838whole advisorymoderatestated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 54 days
Fri 21 Aug 2026· 2 changes
2026-08-21published 2026-08-20Advisory severity changedGHSA-fm29-4mq3-phg6whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 1 days
2026-08-21published 2026-07-24Advisory severity changedGHSA-r292-9mhp-454mCVE-2026-73566whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 28 days
Fri 14 Aug 2026· 3 changes
2026-08-14published 2026-04-14Advisory fix version movedGHSA-355h-qmc2-wpwfCVE-2026-2332
mavenorg.eclipse.jetty:jetty-http
high
stated at publication 11.0.28, now states 11.0.29Time to revision 35 days
2026-08-14published 2026-02-19Package added to advisoryGHSA-p6jf-79j3-33f3CVE-2025-13590criticalnot named as affected when the advisory was published, now names org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.admin.v1Time to revision 176 days
2026-08-14published 2026-04-29Package added to advisoryGHSA-w22p-4x9f-486vCVE-2026-42523criticalnot named as affected when the advisory was published, now names com.coravy.hudson.plugins.github:githubTime to revision 107 days
Thu 13 Aug 2026· 1 change
2026-08-13published 2026-07-29Advisory fix version movedGHSA-2v37-7h3g-55p8CVE-2026-67213
npmnanoid
high
stated at publication 3.3.17, now states 3.3.18Time to revision 15 days
Tue 11 Aug 2026· 1 change
2026-08-11published 2026-06-26Advisory severity changedGHSA-4c3c-r6p8-c863CVE-2026-48813whole advisoryhighstated at publication LOW, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.Time to revision 46 days
Thu 6 Aug 2026· 1 change
2026-08-06published 2026-05-22Advisory fix version movedGHSA-7m8f-hgjq-8gc9CVE-2026-70646
pypiaiosend
high
stated at publication 3.0.6, now states 3.0.7Time to revision 76 days
Tue 4 Aug 2026· 3 changes
2026-08-04published 2026-07-28Advisory fix version movedGHSA-6wcc-39rp-hh9pCVE-2026-54658
npm@hypequery/clickhouse
critical
stated at publication 2.0.2, now states 2.5.1Time to revision 7 days
2026-08-04published 2026-06-03Package added to advisoryGHSA-2j2x-hqr9-3h42CVE-2026-40181moderatenot named as affected when the advisory was published, now names @remix-run/routerTime to revision 62 days
2026-08-04published 2026-07-21Package added to advisoryGHSA-w5pg-649r-p6ggCVE-2026-58439highnot named as affected when the advisory was published, now names code.gitea.io/giteaTime to revision 13 days
Fri 31 Jul 2026· 6 changes
2026-07-31published 2026-04-07Advisory fix version movedGHSA-89gg-p5r5-q6r4
pypimonai
high
stated at publication 1.5.2, now states 1.6.0Time to revision 115 days
2026-07-31published 2026-07-21Package added to advisoryGHSA-m4p7-r5rc-7g4jCVE-2026-59884highnot named as affected when the advisory was published, now names pyasn1Time to revision 10 days
2026-07-31published 2026-06-16Advisory severity changedGHSA-8xpq-cjcf-3wh9CVE-2026-49401whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 45 days
2026-07-31published 2023-08-29Advisory withdrawnGHSA-vmf9-6pcv-xr87CVE-2023-39522whole advisorymoderatewithdrawn 2026-07-31Time to revision 1,067 days
2026-07-31published 2026-06-03Advisory withdrawnGHSA-v42x-x7jp-845hCVE-2026-6657whole advisorymoderatewithdrawn 2026-07-31Time to revision 58 days
2026-07-31published 2026-06-02Advisory withdrawnGHSA-gf7q-q4j7-hp7cCVE-2026-5422whole advisorymoderatewithdrawn 2026-07-31Time to revision 59 days
Thu 30 Jul 2026· 2 changes
2026-07-30published 2025-05-13Package added to advisoryGHSA-qqcr-9jfc-35c4CVE-2024-56526highnot named as affected when the advisory was published, now names oxid-esales/oxideshop-metapackage-ceTime to revision 443 days
2026-07-30published 2025-05-13Package added to advisoryGHSA-qqcr-9jfc-35c4CVE-2024-56526highnot named as affected when the advisory was published, now names oxid-esales/smarty-componentTime to revision 443 days
Tue 28 Jul 2026· 1 change
2026-07-28published 2025-08-27Advisory withdrawnGHSA-cxm3-wv7p-598cCVE-2025-10894whole advisorycriticalwithdrawn 2026-07-28Time to revision 335 days
Fri 24 Jul 2026· 1 change
2026-07-24published 2026-05-06Package added to advisoryGHSA-rwm7-x88c-3g2pCVE-2026-42577highnot named as affected when the advisory was published, now names io.netty:netty-transport-classes-epollTime to revision 79 days
Tue 21 Jul 2026· 7 changes
2026-07-21published 2026-05-07Package added to advisoryGHSA-g924-cjx7-2rjwCVE-2026-42597moderatenot named as affected when the advisory was published, now names github.com/gotenberg/gotenberg/v7Time to revision 76 days
2026-07-21published 2026-04-14Package added to advisoryGHSA-2hx3-vp6r-mg3fCVE-2026-41134highnot named as affected when the advisory was published, now names microsoft.openapi.kiotaTime to revision 98 days
2026-07-21published 2026-04-14Package added to advisoryGHSA-2hx3-vp6r-mg3fCVE-2026-41134highnot named as affected when the advisory was published, now names microsoft.openapi.kiota.builderTime to revision 98 days
2026-07-21published 2025-08-26Advisory severity changedGHSA-xp4f-hrf8-rxw7CVE-2025-71344whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Time to revision 329 days
2026-07-21published 2026-06-23Advisory severity changedGHSA-vcm5-gvmp-78mpCVE-2026-52807whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Time to revision 28 days
2026-07-21published 2026-06-22Advisory severity changedGHSA-c4v7-xg93-qf8gCVE-2026-47267whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Time to revision 29 days
2026-07-21published 2025-08-26Advisory severity changedGHSA-3vg9-h568-4w9mCVE-2025-71354whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Time to revision 329 days
Mon 20 Jul 2026· 2 changes
2026-07-20published 2025-08-26Advisory severity changedGHSA-8r4j-24qv-fmq9CVE-2025-71361whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Time to revision 328 days
2026-07-20published 2026-06-05Advisory severity changedGHSA-jr54-jwhj-55gpCVE-2026-47380whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Time to revision 45 days
Sat 18 Jul 2026· 1 change
2026-07-18published 2025-08-26Advisory severity changedGHSA-6w4w-5w54-rjvrCVE-2025-71358whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Time to revision 326 days
Thu 16 Jul 2026· 1 change
2026-07-16published 2024-05-30Package added to advisoryGHSA-22q7-cg4r-p9mxmoderatenot named as affected when the advisory was published, now names typo3/cms-fluidTime to revision 777 days
Wed 15 Jul 2026· 2 changes
2026-07-15published 2025-12-01Package added to advisoryGHSA-rcmh-qjqh-p98vCVE-2025-14874highnot named as affected when the advisory was published, now names org.webjars.npm:nodemailerTime to revision 226 days
2026-07-15published 2026-06-12Advisory severity changedGHSA-4px2-pw77-vc85CVE-2026-28898whole advisorymoderatestated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 33 days
Tue 7 Jul 2026· 2 changes
2026-07-07published 2026-05-08Package added to advisoryGHSA-mx76-r943-rf8gCVE-2026-8149moderatenot named as affected when the advisory was published, now names org.bouncycastle:bcprov-lts8onTime to revision 61 days
2026-07-07published 2026-06-19Advisory severity changedGHSA-qrpv-q767-xqq2CVE-2026-55255whole advisoryhighstated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 18 days
Mon 6 Jul 2026· 38 changes
2026-07-06published 2026-06-18Package added to advisoryGHSA-jc38-x7x8-2xc8highnot named as affected when the advisory was published, now names web-token/jwt-bundleTime to revision 18 days
2026-07-06published 2026-06-18Package added to advisoryGHSA-jc38-x7x8-2xc8highnot named as affected when the advisory was published, now names web-token/jwt-experimentalTime to revision 18 days
2026-07-06published 2026-06-26Package added to advisoryGHSA-6q7j-xr26-3h2cmoderatenot named as affected when the advisory was published, now names scriban.signedTime to revision 10 days
2026-07-06published 2026-03-24Package added to advisoryGHSA-xw6w-9jjh-p9crmoderatenot named as affected when the advisory was published, now names scriban.signedTime to revision 104 days
2026-07-06published 2026-03-24Package added to advisoryGHSA-m2p3-hwv5-xpqwmoderatenot named as affected when the advisory was published, now names scriban.signedTime to revision 104 days
2026-07-06published 2026-03-24Package added to advisoryGHSA-xcx6-vp38-8hr5highnot named as affected when the advisory was published, now names scriban.signedTime to revision 104 days
2026-07-06published 2026-03-24Package added to advisoryGHSA-v66j-x4hw-fv9ghighnot named as affected when the advisory was published, now names scriban.signedTime to revision 104 days
2026-07-06published 2026-03-24Package added to advisoryGHSA-5wr9-m6jw-xx44criticalnot named as affected when the advisory was published, now names scriban.signedTime to revision 104 days
2026-07-06published 2026-03-24Package added to advisoryGHSA-x6m9-38vm-2xhfhighnot named as affected when the advisory was published, now names scriban.signedTime to revision 104 days
2026-07-06published 2026-03-24Package added to advisoryGHSA-p6q4-fgr8-vx4phighnot named as affected when the advisory was published, now names scriban.signedTime to revision 104 days
2026-07-06published 2026-03-19Package added to advisoryGHSA-5rpf-x9jg-8j5pmoderatenot named as affected when the advisory was published, now names scriban.signedTime to revision 109 days
2026-07-06published 2026-03-19Package added to advisoryGHSA-grr9-747v-xvcphighnot named as affected when the advisory was published, now names scriban.signedTime to revision 109 days
2026-07-06published 2026-03-19Package added to advisoryGHSA-wgh7-7m3c-fx25highnot named as affected when the advisory was published, now names scriban.signedTime to revision 109 days
2026-07-06published 2026-06-26Package added to advisoryGHSA-q6rr-fm2g-g5x8moderatenot named as affected when the advisory was published, now names scriban.signedTime to revision 10 days
2026-07-06published 2026-03-24Package added to advisoryGHSA-c875-h985-hvrchighnot named as affected when the advisory was published, now names scriban.signedTime to revision 104 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-532v-xp3f-837cwhole advisorylowwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-79rc-qpw3-jv92whole advisorylowwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-w8m4-4v35-v6x3whole advisoryhighwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-7259-cwhx-3xx3whole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-ggc5-46rg-mr4vwhole advisorylowwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-66fx-fqv6-5wwxwhole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-67hp-f6hq-2h6gwhole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-vchc-9ggh-3236whole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-rx8h-33gr-vhj9whole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-q94g-3gcf-66x7whole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-vf87-345h-9qhxwhole advisorylowwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-v762-x3cf-5mfgwhole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-53gr-wmf4-8hh3whole advisorylowwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-gpcg-h6x2-c26pwhole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-m26v-hjq3-x245whole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-hj9r-8pfm-rmjjwhole advisorylowwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-v24v-f45g-w7jfwhole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-xh5h-p8c5-4w4xwhole advisorylowwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-hwhf-8p2f-45wrwhole advisorylowwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-2cxp-xq3c-mjxxwhole advisorylowwithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-vp6q-mv9j-j428whole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-88ch-q68x-36v7whole advisorymoderatewithdrawn 2026-07-06Time to revision 75 days
2026-07-06published 2026-04-22Advisory withdrawnGHSA-9gqx-53gp-c8g3whole advisoryhighwithdrawn 2026-07-06Time to revision 75 days
Thu 2 Jul 2026· 4 changes
2026-07-02published 2026-06-19Advisory fix version movedGHSA-h3m5-97jq-qjrfCVE-2026-57168
mavenio.openremote:openremote-manager
critical
stated at publication 1.24.2, now states 1.25.0Time to revision 13 days
2026-07-02published 2026-04-29Advisory severity changedGHSA-5843-p793-ghmmCVE-2026-22740whole advisorymoderatestated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 64 days
2026-07-02published 2026-05-27Advisory severity changedGHSA-6439-2f28-8p8qCVE-2026-45075whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Time to revision 36 days
2026-07-02published 2026-03-18Advisory withdrawnGHSA-wmxr-6j5f-838pwhole advisoryhighwithdrawn 2026-07-02Time to revision 107 days
Wed 1 Jul 2026· 5 changes
2026-07-01published 2024-11-07Package added to advisoryGHSA-7jqf-v358-p8g7CVE-2024-38286highnot named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-coreTime to revision 601 days
2026-07-01published 2024-11-07Package added to advisoryGHSA-7jqf-v358-p8g7CVE-2024-38286highnot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyoteTime to revision 601 days
2026-07-01published 2025-08-13Package added to advisoryGHSA-23hv-mwm6-g8jfCVE-2025-55668moderatenot named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-coreTime to revision 322 days
2026-07-01published 2025-07-10Package added to advisoryGHSA-4j3c-42xv-3f84CVE-2025-52434moderatenot named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-coreTime to revision 356 days
2026-07-01published 2025-07-10Package added to advisoryGHSA-4j3c-42xv-3f84CVE-2025-52434moderatenot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyoteTime to revision 356 days
Tue 30 Jun 2026· 2 changes
2026-06-30published 2024-01-12Advisory severity changedGHSA-8qw9-gf7w-42x5whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Time to revision 900 days
2026-06-30published 2026-05-26Advisory withdrawnGHSA-76v6-f83q-pxvhwhole advisoryhighwithdrawn 2026-06-30Time to revision 35 days
Mon 29 Jun 2026· 1 change
2026-06-29published 2026-02-17Package added to advisoryGHSA-qq5r-98hh-rxc9CVE-2026-24733lownot named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyoteTime to revision 132 days

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory.

Use arrow keys to move between days, Home or End to reach either end, and Enter to open a day.
4,561 record edits in the 52 weeks to 2026-09-07. Scroll for earlier dates.fewermore

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →