Package added to advisory

What a record said when it was published, what it says now, and the commit that changed it.

1,695 advisory changes · newest first · grouped by day

Counted changes of "Package added to advisory", newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Advisory, Which advisory was edited, by its GHSA id.	Package, The package the advisory names, and the registry it comes from.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Mon 13 Oct 2025· 6 changes
2025-10-13published 2025-10-13	GHSA-3cm9-jrf5-h2cxCVE-2025-62242	maven moderate	not named as affected when the advisory was published, now names com.liferay:com.liferay.change.tracking.web	Time to revision 0 days
2025-10-13published 2023-06-14	GHSA-4g42-gqrg-4633CVE-2023-34396	maven high	not named as affected when the advisory was published, now names org.apache.struts:struts-core	Time to revision 852 days
2025-10-13published 2022-05-13 to 2023-06-14	Show all 4 advisories in this change: Package added to advisory: struts:struts named as affected in mavenHide the 4 advisories in this change: Package added to advisory: struts:struts named as affected in maven	maven high	not named as affected when the advisory was published, now names struts:struts	Time to revision 852 days
2025-10-13published 2023-06-14	GHSA-4g42-gqrg-4633CVE-2023-34396	same package registry as the line abovehigh	same change as the line above	Time to revision 852 days
2025-10-13published 2022-05-13	GHSA-7jw3-5q4w-89qgCVE-2016-1181	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-10-13published 2022-05-13	GHSA-5ggr-mpgw-3mgxCVE-2016-1182	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-10-13published 2022-05-14	GHSA-cvvx-r33m-v7pqCVE-2015-0899	same package registry as the line abovehigh	same change as the line above	Duration unknown
Fri 10 Oct 2025· 1 change
2025-10-10published 2023-08-08	GHSA-rg2c-cfxv-qp6fCVE-2023-3894	maven high	not named as affected when the advisory was published, now names com.fasterxml.jackson.dataformat:jackson-dataformat-toml	Time to revision 794 days
Mon 6 Oct 2025· 6 changes
2025-10-06published 2025-07-11 to 2025-08-08	Show all 6 advisories in this change: Package added to advisory: org.pytorch:executorch-android named as affected in mavenHide the 6 advisories in this change: Package added to advisory: org.pytorch:executorch-android named as affected in maven	maven 2 bands	not named as affected when the advisory was published, now names org.pytorch:executorch-android	Time to revision 60 to 87 days
2025-10-06published 2025-07-11	GHSA-h952-963h-rv99CVE-2025-30402	same package registry as the line abovehigh	same change as the line above	Time to revision 87 days
2025-10-06published 2025-08-08	GHSA-84m3-f99p-cqx5CVE-2025-30405	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
2025-10-06published 2025-08-08	GHSA-hj95-mhgf-jxc4CVE-2025-30404	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
2025-10-06published 2025-08-08	GHSA-xc7w-r669-48pfCVE-2025-54951	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
2025-10-06published 2025-08-08	GHSA-9m39-3mf3-xwchCVE-2025-54949	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
2025-10-06published 2025-08-08	GHSA-f9hx-c6jf-3qxmCVE-2025-54950	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
Fri 3 Oct 2025· 1 change
2025-10-03published 2025-09-30	GHSA-27w5-gj5q-82fvCVE-2025-11149	npm high	not named as affected when the advisory was published, now names @nubosoftware/node-static	Time to revision 3 days
Tue 30 Sep 2025· 37 changes
2025-09-30published 2022-05-17 to 2023-11-22	Show all 6 advisories in this change: Package added to advisory: 36 packages named as affected in mavenHide the 6 advisories in this change: Package added to advisory: 36 packages named as affected in maven36 rows, one per advisory and package	maven 3 bands	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.7.7 and 35 more	Time to revision 679 to 1,233 days
2025-09-30published 2022-05-17	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.7.7	Time to revision 1,233 days
2025-09-30published 2022-05-17	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.8.0	Time to revision 1,233 days
2025-09-30published 2022-05-17	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.8.1	Time to revision 1,233 days
2025-09-30published 2022-05-17	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.8.2	Time to revision 1,233 days
2025-09-30published 2022-05-17	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.9.0	Time to revision 1,233 days
2025-09-30published 2022-05-17	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.9.0-1	Time to revision 1,233 days
2025-09-30published 2022-05-17	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.9.1	Time to revision 1,233 days
2025-09-30published 2022-06-28	GHSA-ww3v-6xjf-jv28CVE-2018-18855	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names io.spray:spray-json_2.10	Duration unknown
28 more rows in this change are not listed here. Open all 36 rows →
2025-09-30published 2020-09-03	GHSA-g64q-3vg8-8f93	npm high	not named as affected when the advisory was published, now names pez	Duration unknown
Mon 29 Sep 2025· 2 changes
2025-09-29published 2020-09-03	GHSA-5854-jvxx-2cg9	npm high	not named as affected when the advisory was published, now names content	Duration unknown
2025-09-29published 2025-08-13	GHSA-prj3-ccx8-p6x4CVE-2025-55163	maven high	not named as affected when the advisory was published, now names io.grpc:grpc-netty-shaded	Time to revision 47 days
Fri 26 Sep 2025· 12 changes
2025-09-26published 2020-09-03	GHSA-g9cg-h3jm-cwrc	npm high	not named as affected when the advisory was published, now names @hapi/pez	Duration unknown
2025-09-26published 2025-09-17	Show all 11 advisories in this change: Package added to advisory: d7y.io/dragonfly/v2 named as affected in goHide the 11 advisories in this change: Package added to advisory: d7y.io/dragonfly/v2 named as affected in go	go 3 bands	not named as affected when the advisory was published, now names d7y.io/dragonfly/v2	Time to revision 9 to 9 days
2025-09-26published 2025-09-17	GHSA-mcvp-rpgg-9273CVE-2025-59410	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	GHSA-hx2h-vjw2-8r54CVE-2025-59354	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	GHSA-255v-qv84-29p5CVE-2025-59353	same package registry as the line abovehigh	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	GHSA-79hx-3fp8-hj66CVE-2025-59352	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	GHSA-4mhv-8rh3-4ghwCVE-2025-59351	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	GHSA-c2fc-9q9c-5486CVE-2025-59350	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	GHSA-8425-8r2f-mrv6CVE-2025-59349	same package registry as the line abovelow	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	GHSA-2qgr-gfvj-qpcrCVE-2025-59348	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
3 more rows in this change are not listed here. Open all 11 rows →
Thu 25 Sep 2025· 1 change
2025-09-25published 2020-09-03	GHSA-3wqh-h42r-x8fq	npm high	not named as affected when the advisory was published, now names @hapi/content	Duration unknown
Wed 24 Sep 2025· 3 changes
2025-09-24published 2022-09-23 to 2022-10-25	Show all 3 advisories in this change: Package added to advisory: org.apache.xmlgraphics:batik-bridge named as affected in mavenHide the 3 advisories in this change: Package added to advisory: org.apache.xmlgraphics:batik-bridge named as affected in maven	maven 2 bands	not named as affected when the advisory was published, now names org.apache.xmlgraphics:batik-bridge	Duration unknown
2025-09-24published 2022-10-25	GHSA-rwqr-m72q-v6cmCVE-2022-42890	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-24published 2022-09-23	GHSA-53jm-3hc9-fqqcCVE-2022-38648	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-24published 2022-09-23	GHSA-c5xv-qc8p-mh2vCVE-2022-38398	same package registry as the line abovemoderate	same change as the line above	Duration unknown
Tue 23 Sep 2025· 1 change
2025-09-23published 2023-03-28	GHSA-7phw-cxx7-q9vqCVE-2023-20860	maven critical	not named as affected when the advisory was published, now names org.springframework:spring-webmvc	Time to revision 911 days
Tue 16 Sep 2025· 1 change
2025-09-16published 2021-07-27	GHSA-2363-cqg2-863cCVE-2021-33813	maven high	not named as affected when the advisory was published, now names org.jdom:jdom2	Duration unknown
Fri 12 Sep 2025· 15 changes
2025-09-12published 2020-01-08 to 2025-06-03	Show all 4 advisories in this change: Package added to advisory: org.hibernate:hibernate-validator named as affected in mavenHide the 4 advisories in this change: Package added to advisory: org.hibernate:hibernate-validator named as affected in maven	maven moderate	not named as affected when the advisory was published, now names org.hibernate:hibernate-validator	Time to revision 101 to 309 days
2025-09-12published 2025-06-03	GHSA-7v6m-28jr-rg84CVE-2025-35036	same package registry as the line abovemoderate	same change as the line above	Time to revision 101 days
2025-09-12published 2021-06-04	GHSA-rmrm-75hp-phr2CVE-2020-10693	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-12published 2020-01-08	GHSA-m8p2-495h-ccmhCVE-2019-10219	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-12published 2024-11-07	GHSA-x83m-pf6f-pf9gCVE-2023-1932	same package registry as the line abovemoderate	same change as the line above	Time to revision 309 days
2025-09-12published 2018-10-16 to 2018-10-18	Show all 11 advisories in this change: Package added to advisory: org.bouncycastle:bcprov-jdk15on named as affected in mavenHide the 11 advisories in this change: Package added to advisory: org.bouncycastle:bcprov-jdk15on named as affected in maven	maven 3 bands	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-jdk15on	Duration unknown
2025-09-12published 2018-10-17	GHSA-4mv7-cq75-3qjmCVE-2015-7940	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-12published 2018-10-17	GHSA-r97x-3g8f-gx3mCVE-2016-1000340	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-12published 2018-10-17	GHSA-4vhj-98r6-424hCVE-2016-1000338	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-12published 2018-10-16	GHSA-xqj7-j8j5-f2xrCVE-2018-1000180	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-12published 2018-10-17	GHSA-w285-wf9q-5w69CVE-2016-1000352	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-12published 2018-10-18	GHSA-9gp4-qrff-c648CVE-2016-1000345	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-12published 2018-10-17	GHSA-fjqm-246c-mwqgCVE-2016-1000346	same package registry as the line abovelow	same change as the line above	Duration unknown
2025-09-12published 2018-10-18	GHSA-2j2x-hx4g-2gf4CVE-2016-1000344	same package registry as the line abovehigh	same change as the line above	Duration unknown
3 more rows in this change are not listed here. Open all 11 rows →
Mon 8 Sep 2025· 1 change
2025-09-08published 2025-07-09	GHSA-q92v-3f4w-5xg8CVE-2025-53742	maven moderate	not named as affected when the advisory was published, now names org.jenkins-ci.plugins:applitools-eyes	Time to revision 61 days
Tue 2 Sep 2025· 7 changes
2025-09-02published 2022-05-14	GHSA-xjgh-84hx-56c5Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-xjgh-84hx-56c5Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-xjgh-84hx-56c5	maven high	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core and 1 more	Duration unknown
2025-09-02published 2022-05-14	GHSA-xjgh-84hx-56c5CVE-2017-12617	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Duration unknown
2025-09-02published 2022-05-14	GHSA-xjgh-84hx-56c5CVE-2017-12617	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-catalina	Duration unknown
2025-09-02published 2022-05-14	GHSA-w3j5-q8f2-3cqqCVE-2016-8745	maven high	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-util	Duration unknown
2025-09-02published 2023-03-10	GHSA-vp98-w2p3-mv35CVE-2023-26464	maven high	not named as affected when the advisory was published, now names log4j:log4j	Time to revision 907 days
2025-09-02published 2022-05-17	GHSA-rpjm-422r-95mhCVE-2022-30126	maven moderate	not named as affected when the advisory was published, now names org.apache.tika:tika-core	Duration unknown
2025-09-02published 2022-03-12	GHSA-cr3q-pqgq-m8c2CVE-2018-25031	maven moderate	not named as affected when the advisory was published, now names org.webjars:swagger-ui	Duration unknown
2025-09-02published 2018-10-17	GHSA-qcj7-g2j5-g7r3CVE-2016-1000342	maven high	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-jdk15on	Duration unknown
Fri 29 Aug 2025· 1 change
2025-08-29published 2025-08-20	GHSA-mpww-r37c-vxjwCVE-2025-43746	maven moderate	not named as affected when the advisory was published, now names ccom.liferay:com.liferay.dynamic.data.mapping.web	Time to revision 9 days
Fri 22 Aug 2025· 1 change
2025-08-22published 2025-08-13	GHSA-gqp3-2cvr-x8m3CVE-2025-48989	maven high	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Time to revision 9 days
Thu 14 Aug 2025· 2 changes
2025-08-14published 2022-05-24	GHSA-j2h2-cvwh-cr64CVE-2020-14457	go moderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 1,178 days
2025-08-14published 2025-08-12	GHSA-m5c7-5gv3-hcpfCVE-2025-43734	maven moderate	not named as affected when the advisory was published, now names com.liferay:com.liferay.frontend.taglib.clay	Time to revision 2 days
Mon 11 Aug 2025· 7 changes
2025-08-11published 2018-07-26 to 2022-01-06	Show all 7 advisories in this change: Package added to advisory: lodash-rails named as affected in rubygemsHide the 7 advisories in this change: Package added to advisory: lodash-rails named as affected in rubygems	rubygems 3 bands	not named as affected when the advisory was published, now names lodash-rails	Duration unknown
2025-08-11published 2019-07-19	GHSA-x5rq-j2xg-h7qmCVE-2019-1010266	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-08-11published 2019-07-10	GHSA-jf85-cpcp-j695CVE-2019-10744	same package registry as the line abovecritical	same change as the line above	Duration unknown
2025-08-11published 2019-02-07	GHSA-4xc9-xhrj-v574CVE-2018-16487	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-08-11published 2018-07-26	GHSA-fvqr-27wr-82fmCVE-2018-3721	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-08-11published 2020-07-15	GHSA-p6mc-m468-83gwCVE-2020-8203	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-08-11published 2021-05-06	GHSA-35jh-r3h4-6jhmCVE-2021-23337	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-08-11published 2022-01-06	GHSA-29mw-wpgm-hmr9CVE-2020-28500	same package registry as the line abovemoderate	same change as the line above	Duration unknown
Fri 8 Aug 2025· 2 changes
2025-08-08published 2025-07-28	GHSA-4mxg-3p6v-xgq3Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-4mxg-3p6v-xgq3Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-4mxg-3p6v-xgq3	npm critical	not named as affected when the advisory was published, now names @node-saml/passport-saml and 1 more	Time to revision 11 days
2025-08-08published 2025-07-28	GHSA-4mxg-3p6v-xgq3CVE-2025-54419	same package registry as the line abovecritical	not named as affected when the advisory was published, now names @node-saml/passport-saml	Time to revision 11 days
2025-08-08published 2025-07-28	GHSA-4mxg-3p6v-xgq3CVE-2025-54419	same package registry as the line abovecritical	not named as affected when the advisory was published, now names passport-saml	Time to revision 11 days
Mon 4 Aug 2025· 3 changes
2025-08-04published 2024-09-26 to 2024-10-31	Show all 3 advisories in this change: Package added to advisory: github.com/openbao/openbao named as affected in goHide the 3 advisories in this change: Package added to advisory: github.com/openbao/openbao named as affected in go	go high	not named as affected when the advisory was published, now names github.com/openbao/openbao	Time to revision 277 to 312 days
2025-08-04published 2024-10-10	GHSA-rr8j-7w34-xp5jCVE-2024-9180	same package registry as the line abovehigh	same change as the line above	Time to revision 298 days
2025-08-04published 2024-10-31	GHSA-g233-2p4r-3q7vCVE-2024-8185	same package registry as the line abovehigh	same change as the line above	Time to revision 277 days
2025-08-04published 2024-09-26	GHSA-jg74-mwgw-v6x3CVE-2024-7594	same package registry as the line abovehigh	same change as the line above	Time to revision 312 days
Tue 29 Jul 2025· 1 change
2025-07-29published 2025-06-26	GHSA-xh32-cx6c-cp4vCVE-2025-47943	go moderate	not named as affected when the advisory was published, now names gogs.io/gogs	Time to revision 33 days
Mon 28 Jul 2025· 1 change
2025-07-28published 2025-05-30	GHSA-6j2q-c73v-97c5CVE-2025-41235	maven high	not named as affected when the advisory was published, now names org.springframework.cloud:spring-cloud-gateway-server-mvc	Time to revision 60 days
Fri 25 Jul 2025· 3 changes
2025-07-25published 2024-08-01	GHSA-vvpg-55p7-5h8wShow all 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-vvpg-55p7-5h8wHide the 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-vvpg-55p7-5h8w	go low	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server and 2 more	Time to revision 358 days
2025-07-25published 2024-08-01	GHSA-vvpg-55p7-5h8wCVE-2024-39837	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server	Time to revision 358 days
2025-07-25published 2024-08-01	GHSA-vvpg-55p7-5h8wCVE-2024-39837	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 358 days
2025-07-25published 2024-08-01	GHSA-vvpg-55p7-5h8wCVE-2024-39837	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v6	Time to revision 358 days
Tue 22 Jul 2025· 3 changes
2025-07-22published 2023-11-06	GHSA-r67m-mf7v-qp7jCVE-2023-5968	go moderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 624 days
2025-07-22published 2025-07-19	GHSA-f29h-pxvx-f335CVE-2025-54313	npm high	not named as affected when the advisory was published, now names got-fetch	Time to revision 3 days
2025-07-22published 2025-07-21	GHSA-96c2-h667-9fxpCVE-2025-54082	packagist critical	not named as affected when the advisory was published, now names manogi/nova-tiptap	Time to revision 1 days
Mon 21 Jul 2025· 1 change
2025-07-21published 2025-07-18	GHSA-fm79-3f68-h2fcCVE-2025-53901	crates.io low	not named as affected when the advisory was published, now names wasmtime	Time to revision 3 days
Fri 18 Jul 2025· 6 changes
2025-07-18published 2022-11-25	Show all 4 advisories in this change: Package added to advisory: org.jeecgframework.boot:jeecg-module-system named as affected in mavenHide the 4 advisories in this change: Package added to advisory: org.jeecgframework.boot:jeecg-module-system named as affected in maven	maven 2 bands	not named as affected when the advisory was published, now names org.jeecgframework.boot:jeecg-module-system	Time to revision 966 days
2025-07-18published 2022-11-25	GHSA-g5cj-5h58-j93wCVE-2022-45206	same package registry as the line abovecritical	same change as the line above	Time to revision 966 days
2025-07-18published 2022-11-25	GHSA-v87q-rpwp-qr7qCVE-2022-45210	same package registry as the line abovemoderate	same change as the line above	Time to revision 966 days
2025-07-18published 2022-11-25	GHSA-4j2x-v3mr-467mCVE-2022-45207	same package registry as the line abovecritical	same change as the line above	Time to revision 966 days
2025-07-18published 2022-11-25	GHSA-25gv-mvm7-5h3hCVE-2022-45208	same package registry as the line abovemoderate	same change as the line above	Time to revision 966 days
2025-07-18published 2022-02-01	GHSA-2m53-83f3-562jCVE-2021-23460	maven high	not named as affected when the advisory was published, now names org.webjars.npm:min-dash	Duration unknown
2025-07-18published 2022-05-17	GHSA-cm99-x97g-9qx8CVE-2017-12648	maven moderate	not named as affected when the advisory was published, now names com.liferay:com.liferay.frontend.taglib	Time to revision 1,159 days
Fri 11 Jul 2025· 1 change
2025-07-11published 2025-07-10	GHSA-275g-g844-73jhCVE-2025-53549	crates.io moderate	not named as affected when the advisory was published, now names matrix-sdk-sqlite	Time to revision 1 days
Thu 10 Jul 2025· 1 change
2025-07-10published 2020-09-02	GHSA-7p6w-x2gr-rrf8	npm high	not named as affected when the advisory was published, now names ag-grid	Duration unknown
Wed 9 Jul 2025· 2 changes
2025-07-09published 2025-06-16	GHSA-vv7r-c36w-3prjCVE-2025-48976	maven high	not named as affected when the advisory was published, now names commons-fileupload:commons-fileupload	Time to revision 23 days
2025-07-09published 2025-03-03	GHSA-vm7w-2724-5m23CVE-2024-24778	pypi moderate	not named as affected when the advisory was published, now names streampipes	Time to revision 128 days
Wed 2 Jul 2025· 6 changes
2025-07-02published 2024-12-18	GHSA-p7c9-8xx8-h74fShow all 4 packages in this change: Package added to advisory: 4 packages named as affected in GHSA-p7c9-8xx8-h74fHide the 4 packages in this change: Package added to advisory: 4 packages named as affected in GHSA-p7c9-8xx8-h74f	maven low	not named as affected when the advisory was published, now names org.apache.kafka:kafka_2.10 and 3 more	Time to revision 196 to 196 days
2025-07-02published 2024-12-18	GHSA-p7c9-8xx8-h74fCVE-2024-56128	same package registry as the line abovelow	not named as affected when the advisory was published, now names org.apache.kafka:kafka_2.10	Time to revision 196 days
2025-07-02published 2024-12-18	GHSA-p7c9-8xx8-h74fCVE-2024-56128	same package registry as the line abovelow	not named as affected when the advisory was published, now names org.apache.kafka:kafka_2.11	Time to revision 196 days
2025-07-02published 2024-12-18	GHSA-p7c9-8xx8-h74fCVE-2024-56128	same package registry as the line abovelow	not named as affected when the advisory was published, now names org.apache.kafka:kafka_2.12	Time to revision 196 days
2025-07-02published 2024-12-18	GHSA-p7c9-8xx8-h74fCVE-2024-56128	same package registry as the line abovelow	not named as affected when the advisory was published, now names org.apache.kafka:kafka_2.13	Time to revision 196 days
2025-07-02published 2025-05-14	Show all 2 advisories in this change: Package added to advisory: apache-iotdb named as affected in pypiHide the 2 advisories in this change: Package added to advisory: apache-iotdb named as affected in pypi	pypi 2 bands	not named as affected when the advisory was published, now names apache-iotdb	Time to revision 49 days
2025-07-02published 2025-05-14	GHSA-5fc3-pqf2-57cxCVE-2025-26864	same package registry as the line abovemoderate	same change as the line above	Time to revision 49 days
2025-07-02published 2025-05-14	GHSA-f4rq-f4j9-f6rmCVE-2024-24780	same package registry as the line abovecritical	same change as the line above	Time to revision 49 days
Tue 1 Jul 2025· 2 changes
2025-07-01published 2021-10-06	GHSA-v6w3-2prq-h95fShow all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-v6w3-2prq-h95fHide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-v6w3-2prq-h95f	maven moderate	not named as affected when the advisory was published, now names org.glassfish:jakarta.el and 1 more	Duration unknown
2025-07-01published 2021-10-06	GHSA-v6w3-2prq-h95fCVE-2021-28170	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.glassfish:jakarta.el	Duration unknown
2025-07-01published 2021-10-06	GHSA-v6w3-2prq-h95fCVE-2021-28170	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.glassfish:javax.el	Duration unknown
Mon 30 Jun 2025· 1 change
2025-06-30published 2025-06-17	GHSA-rvqx-wpfh-mfx7CVE-2025-3248	pypi critical	not named as affected when the advisory was published, now names langflow-base	Time to revision 13 days
Tue 24 Jun 2025· 2 changes
2025-06-24published 2024-05-03	GHSA-4h8f-2wvx-gg5wShow all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-4h8f-2wvx-gg5wHide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-4h8f-2wvx-gg5w	maven moderate	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-lts8on and 1 more	Time to revision 417 days
2025-06-24published 2024-05-03	GHSA-4h8f-2wvx-gg5wCVE-2024-34447	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-lts8on	Time to revision 417 days
2025-06-24published 2024-05-03	GHSA-4h8f-2wvx-gg5wCVE-2024-34447	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.bouncycastle:bctls-fips	Time to revision 417 days
Fri 20 Jun 2025· 1 change
2025-06-20published 2024-09-13	GHSA-v6x6-4v4x-2fx9CVE-2024-6862	npm moderate	not named as affected when the advisory was published, now names @lunary/backend	Time to revision 280 days
Mon 9 Jun 2025· 2 changes
2025-06-09published 2025-03-26	GHSA-56p6-qw3c-fq2gShow all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-56p6-qw3c-fq2gHide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-56p6-qw3c-fq2g	npm low	not named as affected when the advisory was published, now names @directus/api and 1 more	Time to revision 75 days
2025-06-09published 2025-03-26	GHSA-56p6-qw3c-fq2gCVE-2025-30351	same package registry as the line abovelow	not named as affected when the advisory was published, now names @directus/api	Time to revision 75 days
2025-06-09published 2025-03-26	GHSA-56p6-qw3c-fq2gCVE-2025-30351	same package registry as the line abovelow	not named as affected when the advisory was published, now names @directus/types	Time to revision 75 days
Mon 2 Jun 2025· 1 change
2025-06-02published 2022-05-17	GHSA-2pcj-76hj-xqhmCVE-2016-10131	packagist critical	not named as affected when the advisory was published, now names bcit-ci/codeigniter	Time to revision 1,113 days
Fri 30 May 2025· 1 change
2025-05-30published 2024-02-27	GHSA-xh6m-7cr7-xx66CVE-2023-45859	maven high	not named as affected when the advisory was published, now names com.hazelcast:hazelcast-all	Time to revision 458 days
Thu 29 May 2025· 1 change
2025-05-29published 2018-10-19	GHSA-jc7r-v6fg-2gpfCVE-2018-8039	maven high	not named as affected when the advisory was published, now names org.apache.cxf:cxf-rt-transports-http	Duration unknown
Tue 27 May 2025· 4 changes
2025-05-27published 2024-10-18	GHSA-4gc7-5j7h-4qphCVE-2024-38820	maven moderate	not named as affected when the advisory was published, now names org.springframework:spring-web	Time to revision 222 days
2025-05-27published 2025-04-01	GHSA-6jwp-4wvj-6597Show all 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-6jwp-4wvj-6597Hide the 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-6jwp-4wvj-6597	maven critical	not named as affected when the advisory was published, now names org.apache.pinot:pinot-broker and 2 more	Time to revision 56 days
2025-05-27published 2025-04-01	GHSA-6jwp-4wvj-6597CVE-2024-56325	same package registry as the line abovecritical	not named as affected when the advisory was published, now names org.apache.pinot:pinot-broker	Time to revision 56 days
2025-05-27published 2025-04-01	GHSA-6jwp-4wvj-6597CVE-2024-56325	same package registry as the line abovecritical	not named as affected when the advisory was published, now names org.apache.pinot:pinot-common	Time to revision 56 days
2025-05-27published 2025-04-01	GHSA-6jwp-4wvj-6597CVE-2024-56325	same package registry as the line abovecritical	not named as affected when the advisory was published, now names org.apache.pinot:pinot-controller	Time to revision 56 days
Wed 14 May 2025· 2 changes
2025-05-14published 2025-04-28	Show all 2 advisories in this change: Package added to advisory: org.apache.tomcat.embed:tomcat-embed-core named as affected in mavenHide the 2 advisories in this change: Package added to advisory: org.apache.tomcat.embed:tomcat-embed-core named as affected in maven	maven 2 bands	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Time to revision 16 days
2025-05-14published 2025-04-28	GHSA-ff77-26x5-69crCVE-2025-31651	same package registry as the line abovelow	same change as the line above	Time to revision 16 days
2025-05-14published 2025-04-28	GHSA-3p2h-wqq4-wf4hCVE-2025-31650	same package registry as the line abovemoderate	same change as the line above	Time to revision 16 days
Wed 7 May 2025· 4 changes
2025-05-07published 2021-12-10 to 2022-01-04	Show all 4 advisories in this change: Package added to advisory: org.ops4j.pax.logging:pax-logging-log4j2 named as affected in mavenHide the 4 advisories in this change: Package added to advisory: org.ops4j.pax.logging:pax-logging-log4j2 named as affected in maven	maven 3 bands	not named as affected when the advisory was published, now names org.ops4j.pax.logging:pax-logging-log4j2	Duration unknown
2025-05-07published 2022-01-04	GHSA-8489-44mv-ggj8CVE-2021-44832	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-05-07published 2021-12-18	GHSA-p6xc-xr62-6r2gCVE-2021-45105	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-05-07published 2021-12-14	GHSA-7rjr-3q55-vv33CVE-2021-45046	same package registry as the line abovecritical	same change as the line above	Duration unknown
2025-05-07published 2021-12-10	GHSA-jfh8-c2jp-5v3qCVE-2021-44228	same package registry as the line abovecritical	same change as the line above	Duration unknown
Mon 14 Apr 2025· 5 changes
2025-04-14published 2022-05-14	Show all 2 advisories in this change: Package added to advisory: org.apache.tomcat:tomcat-catalina named as affected in mavenHide the 2 advisories in this change: Package added to advisory: org.apache.tomcat:tomcat-catalina named as affected in maven	maven moderate	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-catalina	Duration unknown
2025-04-14published 2022-05-14	GHSA-prc3-7f44-w48jCVE-2014-0119	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-04-14published 2022-05-14	GHSA-qprx-q2r7-3rx6CVE-2014-0096	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-04-14published 2022-05-14	GHSA-prc3-7f44-w48jCVE-2014-0119	maven moderate	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-jasper	Duration unknown
2025-04-14published 2022-05-14	GHSA-xh5x-j8jf-pcpxCVE-2014-0099	maven moderate	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-util	Duration unknown
2025-04-14published 2022-05-14	GHSA-475f-74wp-pqv5CVE-2014-0075	maven moderate	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyote	Duration unknown
Thu 3 Apr 2025· 1 change
2025-04-03published 2025-03-20	GHSA-x48g-hm9c-ww42CVE-2024-12909	pypi critical	not named as affected when the advisory was published, now names llama-index-packs-finchat	Time to revision 14 days
Thu 20 Mar 2025· 2 changes
2025-03-20published 2025-03-20	GHSA-h7xg-cmpp-48hfCVE-2024-10553	maven critical	not named as affected when the advisory was published, now names ai.h2o:h2o-core	Time to revision 0 days
2025-03-20published 2025-03-20	GHSA-2r4x-667f-mpfhCVE-2024-47552	maven low	not named as affected when the advisory was published, now names org.apache.seata:seata-config-core	Time to revision 0 days
Mon 17 Mar 2025· 3 changes
2025-03-17published 2022-02-10	GHSA-3c7p-vv5r-cmr5Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-3c7p-vv5r-cmr5Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-3c7p-vv5r-cmr5	maven critical	not named as affected when the advisory was published, now names org.apache.solr:solr-core and 1 more	Duration unknown
2025-03-17published 2022-02-10	GHSA-3c7p-vv5r-cmr5CVE-2020-13957	same package registry as the line abovecritical	not named as affected when the advisory was published, now names org.apache.solr:solr-core	Duration unknown
2025-03-17published 2022-02-10	GHSA-3c7p-vv5r-cmr5CVE-2020-13957	same package registry as the line abovecritical	not named as affected when the advisory was published, now names org.apache.solr:solr-solrj	Duration unknown
2025-03-17published 2025-03-10	GHSA-83qj-6fr2-vhqgCVE-2025-24813	maven critical	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Time to revision 7 days
Fri 14 Mar 2025· 2 changes
2025-03-14published 2025-03-11	GHSA-44f7-5fj5-h4pxCVE-2025-27403	go high	not named as affected when the advisory was published, now names github.com/deislabs/ratify	Time to revision 3 days
2025-03-14published 2023-09-15	GHSA-hvpq-7vcc-5hj5CVE-2023-41592	npm moderate	not named as affected when the advisory was published, now names froala-editor	Time to revision 547 days
Tue 11 Mar 2025· 3 changes
2025-03-11published 2025-02-12	GHSA-6fgm-x6ff-w78fShow all 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-6fgm-x6ff-w78fHide the 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-6fgm-x6ff-w78f	go moderate	not named as affected when the advisory was published, now names github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v4 and 2 more	Time to revision 27 days
2025-03-11published 2025-02-12	GHSA-6fgm-x6ff-w78f	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v4	Time to revision 27 days
2025-03-11published 2025-02-12	GHSA-6fgm-x6ff-w78f	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v5	Time to revision 27 days
2025-03-11published 2025-02-12	GHSA-6fgm-x6ff-w78f	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v6	Time to revision 27 days
Thu 6 Mar 2025· 21 changes
2025-03-06published 2019-11-20 to 2025-02-03	Show all 21 advisories in this change: Package added to advisory: phpoffice/phpexcel named as affected in packagistHide the 21 advisories in this change: Package added to advisory: phpoffice/phpexcel named as affected in packagist	packagist 2 bands	not named as affected when the advisory was published, now names phpoffice/phpexcel	Time to revision 31 to 189 days
2025-03-06published 2025-02-03	GHSA-r57h-547h-w24fCVE-2025-23210	same package registry as the line abovemoderate	same change as the line above	Time to revision 31 days
2025-03-06published 2025-01-03	GHSA-jmpx-686v-c3wxCVE-2024-56365	same package registry as the line abovehigh	same change as the line above	Time to revision 62 days
2025-03-06published 2024-11-18	GHSA-7cc9-j4mv-vcjpCVE-2024-48917	same package registry as the line abovehigh	same change as the line above	Time to revision 108 days
2025-03-06published 2025-01-03	GHSA-q9jv-mm3r-j47rCVE-2024-56412	same package registry as the line abovemoderate	same change as the line above	Time to revision 62 days
2025-03-06published 2025-01-03	GHSA-hwcp-2h35-p66wCVE-2024-56411	same package registry as the line abovemoderate	same change as the line above	Time to revision 62 days
2025-03-06published 2025-01-03	GHSA-wv23-996v-q229CVE-2024-56410	same package registry as the line abovemoderate	same change as the line above	Time to revision 62 days
2025-03-06published 2025-01-03	GHSA-j2xg-cjcx-4677CVE-2024-56409	same package registry as the line abovehigh	same change as the line above	Time to revision 62 days
2025-03-06published 2025-01-03	GHSA-c6fv-7vh8-2rhrCVE-2024-56366	same package registry as the line abovehigh	same change as the line above	Time to revision 62 days
13 more rows in this change are not listed here. Open all 21 rows →
Wed 5 Mar 2025· 2 changes
2025-03-05published 2021-11-08	GHSA-282f-qqgm-c34qCVE-2021-23807	npm moderate	not named as affected when the advisory was published, now names org.webjars.npm:json-pointer	Duration unknown
2025-03-05published 2021-05-10	GHSA-7mg4-w3w5-x5pcCVE-2020-7709	maven moderate	not named as affected when the advisory was published, now names org.webjars.npm:json-pointer	Duration unknown
Wed 26 Feb 2025· 1 change
2025-02-26published 2025-02-24	GHSA-c6gw-w398-hv78CVE-2025-27144	go moderate	not named as affected when the advisory was published, now names github.com/go-jose/go-jose/v3	Time to revision 2 days
Wed 19 Feb 2025· 1 change
2025-02-19published 2025-01-21	GHSA-69cg-w8vm-h229CVE-2024-10761	nuget moderate	not named as affected when the advisory was published, now names umbraco.cms.web.common	Time to revision 29 days
Tue 18 Feb 2025· 1 change
2025-02-18published 2024-08-21	GHSA-7r32-vfj5-c2jvCVE-2024-43407	packagist moderate	not named as affected when the advisory was published, now names ckeditor/ckeditor	Time to revision 181 days
Thu 13 Feb 2025· 2 changes
2025-02-13published 2023-10-10	GHSA-jm7m-8jh6-29hpCVE-2023-42794	maven moderate	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyote	Time to revision 492 days
2025-02-13published 2025-01-28	GHSA-58fx-7v9q-3g56CVE-2024-13484	go high	not named as affected when the advisory was published, now names github.com/redhat-developer/gitops-operator	Time to revision 16 days
Tue 11 Feb 2025· 1 change
2025-02-11published 2025-01-23	GHSA-pmf4-v838-29hgCVE-2025-24353	npm moderate	not named as affected when the advisory was published, now names @directus/app	Time to revision 19 days
Mon 10 Feb 2025· 38 changes
2025-02-10published 2019-11-20 to 2022-05-24	Show all 38 advisories in this change: Package added to advisory: magento/project-community-edition named as affected in packagistHide the 38 advisories in this change: Package added to advisory: magento/project-community-edition named as affected in packagist	packagist 4 bands	not named as affected when the advisory was published, now names magento/project-community-edition	Time to revision 993 days
2025-02-10published 2022-05-24	GHSA-cc3w-r3w8-hfh7CVE-2021-28567	same package registry as the line abovemoderate	same change as the line above	Time to revision 993 days
2025-02-10published 2022-05-24	GHSA-39ch-rg26-gmq5CVE-2021-28556	same package registry as the line abovemoderate	same change as the line above	Time to revision 993 days
2025-02-10published 2022-05-24	GHSA-7gh6-f4jh-3crqCVE-2021-28583	same package registry as the line abovehigh	same change as the line above	Time to revision 993 days
2025-02-10published 2022-05-24	GHSA-7gpv-xrjr-f5h4CVE-2021-28584	same package registry as the line abovemoderate	same change as the line above	Time to revision 993 days
2025-02-10published 2022-05-24	GHSA-c38m-9668-6j2wCVE-2021-28585	same package registry as the line abovemoderate	same change as the line above	Time to revision 993 days
2025-02-10published 2022-05-24	GHSA-4h3p-63x6-vwg2CVE-2021-21031	same package registry as the line abovemoderate	same change as the line above	Time to revision 993 days
2025-02-10published 2022-05-24	GHSA-4jfq-f8hc-775qCVE-2021-21032	same package registry as the line abovemoderate	same change as the line above	Time to revision 993 days
2025-02-10published 2022-05-24	GHSA-6988-g89m-27vfCVE-2021-21030	same package registry as the line abovehigh	same change as the line above	Time to revision 993 days
30 more rows in this change are not listed here. Open all 38 rows →
Fri 31 Jan 2025· 5 changes
2025-01-31published 2020-04-29	Show all 2 advisories in this change: Package added to advisory: components/jquery named as affected in packagistHide the 2 advisories in this change: Package added to advisory: components/jquery named as affected in packagist	packagist moderate	not named as affected when the advisory was published, now names components/jquery	Duration unknown
2025-01-31published 2020-04-29	GHSA-jpcq-cgw6-v4j6CVE-2020-11023	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-01-31published 2020-04-29	GHSA-gxr4-xjj5-5px2CVE-2020-11022	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-01-31published 2018-10-17	Show all 2 advisories in this change: Package added to advisory: org.springframework:spring-messaging named as affected in mavenHide the 2 advisories in this change: Package added to advisory: org.springframework:spring-messaging named as affected in maven	maven critical	not named as affected when the advisory was published, now names org.springframework:spring-messaging	Duration unknown
2025-01-31published 2018-10-17	GHSA-3rmv-2pg5-xvqjCVE-2018-1275	same package registry as the line abovecritical	same change as the line above	Duration unknown
2025-01-31published 2018-10-17	GHSA-p5hg-3xm3-gcjgCVE-2018-1270	same package registry as the line abovecritical	same change as the line above	Duration unknown
2025-01-31published 2024-07-11	GHSA-9mvj-f7w8-pvh2CVE-2024-6484	npm moderate	not named as affected when the advisory was published, now names bootstrap-sass	Time to revision 204 days
Thu 30 Jan 2025· 1 change
2025-01-30published 2020-04-29	GHSA-gxr4-xjj5-5px2CVE-2020-11022	packagist moderate	not named as affected when the advisory was published, now names athlon1600/youtube-downloader	Duration unknown
Tue 21 Jan 2025· 3 changes
2025-01-21published 2024-07-17	Show all 3 advisories in this change: Package added to advisory: streampipes named as affected in pypiHide the 3 advisories in this change: Package added to advisory: streampipes named as affected in pypi	pypi 2 bands	not named as affected when the advisory was published, now names streampipes	Time to revision 188 to 188 days
2025-01-21published 2024-07-17	GHSA-6523-jf4r-c962CVE-2024-31411	same package registry as the line abovehigh	same change as the line above	Time to revision 188 days
2025-01-21published 2024-07-17	GHSA-2qph-v9p2-q2gvCVE-2024-30471	same package registry as the line abovemoderate	same change as the line above	Time to revision 188 days
2025-01-21published 2024-07-17	GHSA-9gr7-gh74-qg9xCVE-2024-31979	same package registry as the line abovemoderate	same change as the line above	Time to revision 188 days
Mon 20 Jan 2025· 1 change
2025-01-20published 2021-11-10	GHSA-r28h-x6hv-2fq3CVE-2021-43570	maven critical	not named as affected when the advisory was published, now names com.starkbank.ellipticcurve:starkbank-ecdsa	Duration unknown
Fri 17 Jan 2025· 5 changes
2025-01-17published 2024-05-20	GHSA-qxqf-2mfx-x8jwShow all 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-qxqf-2mfx-x8jwHide the 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-qxqf-2mfx-x8jw	maven high	not named as affected when the advisory was published, now names org.verapdf:verapdf-library and 2 more	Time to revision 242 days
2025-01-17published 2024-05-20	GHSA-qxqf-2mfx-x8jwCVE-2024-28109	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.verapdf:verapdf-library	Time to revision 242 days
2025-01-17published 2024-05-20	GHSA-qxqf-2mfx-x8jwCVE-2024-28109	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.verapdf:verapdf-library-arlington	Time to revision 242 days
2025-01-17published 2024-05-20	GHSA-qxqf-2mfx-x8jwCVE-2024-28109	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.verapdf:verapdf-library-jakarta	Time to revision 242 days
2025-01-17published 2022-02-10	GHSA-6566-9526-52v6CVE-2020-10591	maven high	not named as affected when the advisory was published, now names com.walmartlabs.concord:concord-common	Duration unknown
2025-01-17published 2022-05-24	GHSA-jffq-528j-mp6cCVE-2020-10991	maven critical	not named as affected when the advisory was published, now names org.mule.modules:mule-apikit-module	Duration unknown
Thu 16 Jan 2025· 2 changes
2025-01-16published 2023-01-24	Show all 2 advisories in this change: Package added to advisory: org.opensearch.plugin:opensearch-security named as affected in mavenHide the 2 advisories in this change: Package added to advisory: org.opensearch.plugin:opensearch-security named as affected in maven	maven moderate	not named as affected when the advisory was published, now names org.opensearch.plugin:opensearch-security	Time to revision 723 days
2025-01-16published 2023-01-24	GHSA-v3cg-7r9h-r2g6CVE-2023-23613	same package registry as the line abovemoderate	same change as the line above	Time to revision 723 days
2025-01-16published 2023-01-24	GHSA-864v-6qj7-62qjCVE-2023-23612	same package registry as the line abovemoderate	same change as the line above	Time to revision 723 days
Wed 15 Jan 2025· 5 changes
2025-01-15published 2023-02-18	GHSA-jrmh-v64j-mjm9Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-jrmh-v64j-mjm9Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-jrmh-v64j-mjm9	maven moderate	not named as affected when the advisory was published, now names org.jboss.resteasy:resteasy-core and 1 more	Time to revision 698 days
2025-01-15published 2023-02-18	GHSA-jrmh-v64j-mjm9	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.jboss.resteasy:resteasy-core	Time to revision 698 days
2025-01-15published 2023-02-18	GHSA-jrmh-v64j-mjm9	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names org.jboss.resteasy:resteasy-multipart-provider	Time to revision 698 days
2025-01-15published 2024-07-09	GHSA-vfwh-gvf6-mff8CVE-2024-39031	maven moderate	not named as affected when the advisory was published, now names org.silverpeas.core:silverpeas-core-web	Time to revision 190 days
2025-01-15published 2024-05-22	GHSA-9rrw-82r2-623pCVE-2024-29392	maven moderate	not named as affected when the advisory was published, now names org.silverpeas.core:silverpeas-core	Time to revision 238 days
2025-01-15published 2022-05-13	GHSA-57q5-x8jf-g7h8CVE-2017-7561	maven high	not named as affected when the advisory was published, now names org.jboss.resteasy:resteasy-jaxrs	Duration unknown
Fri 10 Jan 2025· 1 change
2025-01-10published 2024-12-02	GHSA-q3v6-hm2v-pw99CVE-2024-38827	maven moderate	not named as affected when the advisory was published, now names org.springframework.security:spring-security-core	Time to revision 39 days
Wed 8 Jan 2025· 2 changes
2025-01-08published 2024-12-20	GHSA-27hp-xhwr-wr2mShow all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-27hp-xhwr-wr2mHide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-27hp-xhwr-wr2m	maven high	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core and 1 more	Time to revision 19 days
2025-01-08published 2024-12-20	GHSA-27hp-xhwr-wr2mCVE-2024-56337	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Time to revision 19 days
2025-01-08published 2024-12-20	GHSA-27hp-xhwr-wr2mCVE-2024-56337	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-embed-core	Time to revision 19 days
Thu 26 Dec 2024· 1 change
2024-12-26published 2024-12-17	GHSA-5j33-cvvr-w245CVE-2024-50379	maven high	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Time to revision 9 days
Mon 23 Dec 2024· 1 change
2024-12-23published 2024-12-16	GHSA-8wcc-m6j2-qxvm	go high	not named as affected when the advisory was published, now names cosmossdk.io/x/tx	Time to revision 7 days

Counted in advisories, never added to the CVE and KEV figures. This kind is counted once per advisory and per package, so one advisory that named four further packages counts four times. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →