Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

5,026 advisory changes · newest first · grouped by day

Counted changes, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Advisory, Which advisory was edited, by its GHSA id.	Package, The package the advisory names, and the registry it comes from.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Thu 14 Jul 2022· 1 change
2022-07-14published 2022-07-05	Advisory severity changed	GHSA-p64x-8rxx-wf6qCVE-2022-34265	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 10 days
Wed 13 Jul 2022· 8 changes
2022-07-13published 2022-07-02	Advisory severity changed	GHSA-735f-pg76-fxc4CVE-2022-2274	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 12 days
2022-07-13published 2022-07-02	Advisory severity changed	GHSA-7mwh-4pqv-wmr8CVE-2022-25758	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 12 days
2022-07-13published 2022-07-01	Advisory severity changed	GHSA-2m4x-4q9j-w97gCVE-2022-33082	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 13 days
2022-07-13published 2022-01-08 to 2022-07-05	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 8 to 187 days
2022-07-13published 2022-07-05	same kind of change as the line above	GHSA-977c-63xq-cgw3CVE-2022-31115	same package and registry as the line abovehigh	same change as the line above	Time to revision 8 days
2022-07-13published 2022-01-08	same kind of change as the line above	GHSA-mgpf-hhgf-cxg4CVE-2021-45457	same package and registry as the line abovehigh	same change as the line above	Time to revision 187 days
2022-07-13published 2021-11-23	Advisory severity changed	GHSA-j4mv-2rv7-v2j9CVE-2021-22966	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 232 days
2022-07-13published 2021-09-02	Advisory severity changed	GHSA-wmpm-fq7r-jq56CVE-2021-23427	whole advisorycritical	stated at publication HIGH, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 314 days
2022-07-13published 2021-09-02	Advisory severity changed	GHSA-vpw5-grxx-v396CVE-2021-36793	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 314 days
Mon 11 Jul 2022· 21 changes
2022-07-11published 2022-06-28	Package added to advisory	GHSA-m43h-hfrq-x8wxCVE-2022-26477	pypi high	not named as affected when the advisory was published, now names systemds	Time to revision 14 days
2022-07-11published 2022-04-03	Package added to advisory	GHSA-558x-2xjg-6232CVE-2022-22950	maven moderate	not named as affected when the advisory was published, now names org.springframework:spring-expression	Time to revision 100 days
2022-07-11published 2018-10-16	Package added to advisory	GHSA-jc8g-xhw5-6x46Show all 6 packages in this change: Package added to advisory: 6 packages named as affected in GHSA-jc8g-xhw5-6x46Hide the 6 packages in this change: Package added to advisory: 6 packages named as affected in GHSA-jc8g-xhw5-6x46	nuget high	not named as affected when the advisory was published, now names system.private.servicemodel and 5 more	Time to revision 1,364 days
2022-07-11published 2018-10-16	same kind of change as the line above	GHSA-jc8g-xhw5-6x46CVE-2018-0786	same package registry as the line abovehigh	not named as affected when the advisory was published, now names system.private.servicemodel	Time to revision 1,364 days
2022-07-11published 2018-10-16	same kind of change as the line above	GHSA-jc8g-xhw5-6x46CVE-2018-0786	same package registry as the line abovehigh	not named as affected when the advisory was published, now names system.servicemodel.duplex	Time to revision 1,364 days
2022-07-11published 2018-10-16	same kind of change as the line above	GHSA-jc8g-xhw5-6x46CVE-2018-0786	same package registry as the line abovehigh	not named as affected when the advisory was published, now names system.servicemodel.http	Time to revision 1,364 days
2022-07-11published 2018-10-16	same kind of change as the line above	GHSA-jc8g-xhw5-6x46CVE-2018-0786	same package registry as the line abovehigh	not named as affected when the advisory was published, now names system.servicemodel.nettcp	Time to revision 1,364 days
2022-07-11published 2018-10-16	same kind of change as the line above	GHSA-jc8g-xhw5-6x46CVE-2018-0786	same package registry as the line abovehigh	not named as affected when the advisory was published, now names system.servicemodel.primitives	Time to revision 1,364 days
2022-07-11published 2018-10-16	same kind of change as the line above	GHSA-jc8g-xhw5-6x46CVE-2018-0786	same package registry as the line abovehigh	not named as affected when the advisory was published, now names system.servicemodel.security	Time to revision 1,364 days
2022-07-11published 2018-10-16	Package added to advisory	GHSA-mv2r-q4g5-j8q5Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-mv2r-q4g5-j8q5Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-mv2r-q4g5-j8q5	nuget high	not named as affected when the advisory was published, now names microsoft.aspnetcore.all and 1 more	Time to revision 1,364 days
2022-07-11published 2018-10-16	same kind of change as the line above	GHSA-mv2r-q4g5-j8q5CVE-2018-8269	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.all	Time to revision 1,364 days
2022-07-11published 2018-10-16	same kind of change as the line above	GHSA-mv2r-q4g5-j8q5CVE-2018-8269	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.dataprotection.azurestorage	Time to revision 1,364 days
2022-07-11published 2017-10-24	Package added to advisory	GHSA-qrgf-jqqm-x7xvCVE-2013-5671	rubygems high	not named as affected when the advisory was published, now names fog-dragonfly	Time to revision 1,721 days
2022-07-11published 2022-06-30	Advisory severity changed	GHSA-cxgw-r5jg-7xwqCVE-2022-2073	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 12 days
2022-07-11published 2022-06-24 to 2022-06-29	Advisory severity changed	Show all 4 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 4 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 13 to 18 days
2022-07-11published 2022-06-29	same kind of change as the line above	GHSA-3j8f-xvm3-ffx4CVE-2022-0624	same package and registry as the line abovehigh	same change as the line above	Time to revision 13 days
2022-07-11published 2022-06-28	same kind of change as the line above	GHSA-4p35-cfcx-8653CVE-2022-0722	same package and registry as the line abovehigh	same change as the line above	Time to revision 14 days
2022-07-11published 2022-06-28	same kind of change as the line above	GHSA-m43h-hfrq-x8wxCVE-2022-26477	same package and registry as the line abovehigh	same change as the line above	Time to revision 14 days
2022-07-11published 2022-06-24	same kind of change as the line above	GHSA-qx2j-85q5-ffp8CVE-2022-34296	same package and registry as the line abovehigh	same change as the line above	Time to revision 18 days
2022-07-11published 2022-06-29	Advisory severity changed	GHSA-pf6p-25r2-fx45CVE-2022-0085	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 13 days
2022-07-11published 2022-06-28	Advisory severity changed	GHSA-7f3x-x4pr-wqhjCVE-2022-2216	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 14 days
2022-07-11published 2022-06-14 to 2022-06-28	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 14 to 27 days
2022-07-11published 2022-06-28	same kind of change as the line above	GHSA-cgrj-xjm7-9q27CVE-2022-33146	same package and registry as the line abovemoderate	same change as the line above	Time to revision 14 days
2022-07-11published 2022-06-14	same kind of change as the line above	GHSA-3885-8gqc-3wpfCVE-2022-30184	same package and registry as the line abovemoderate	same change as the line above	Time to revision 27 days
2022-07-11published 2022-06-28	Advisory severity changed	GHSA-jpp7-7chh-cf67CVE-2022-2218	whole advisorymoderate	stated at publication CRITICAL, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 14 days
Wed 6 Jul 2022· 1 change
2022-07-06published 2022-06-25	Advisory severity changed	GHSA-3jxh-6635-6jwpCVE-2022-30117	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 12 days
Tue 5 Jul 2022· 9 changes
2022-07-05published 2022-06-17 to 2022-06-24	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 12 to 19 days
2022-07-05published 2022-06-17	same kind of change as the line above	GHSA-x4mq-m75f-mx8m	same package and registry as the line abovecritical	same change as the line above	Time to revision 19 days
2022-07-05published 2022-06-24	same kind of change as the line above	GHSA-5ww9-9qp2-x524CVE-2022-33127	same package and registry as the line abovecritical	same change as the line above	Time to revision 12 days
2022-07-05published 2022-06-07	Advisory severity changed	GHSA-5c5f-7vfq-3732CVE-2022-32511	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 29 days
2022-07-05published 2022-06-23	Advisory severity changed	GHSA-qmx3-m648-hr74CVE-2022-32549	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 13 days
2022-07-05published 2021-11-23	Advisory severity changed	GHSA-vpf5-82c8-9v36CVE-2021-23433	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 224 days
2022-07-05published 2021-03-19	Advisory severity changed	GHSA-qc65-cgvr-93p6CVE-2021-23356	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 473 days
2022-07-05published 2021-03-19	Advisory severity changed	GHSA-f38p-c2gq-4pmrCVE-2021-21267	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 473 days
2022-07-05published 2021-03-08	Advisory severity changed	GHSA-fvcj-hvfw-7f2vCVE-2021-1725	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 484 days
2022-07-05published 2019-12-12	Advisory severity changed	GHSA-484f-743f-6jx2CVE-2019-16774	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 936 days
Wed 29 Jun 2022· 8 changes
2022-06-29published 2021-05-21	Advisory fix version moved	GHSA-xg2h-wx96-xgxrCVE-2021-4238	gogithub.com/masterminds/goutils low	stated at publication 1.0.2, now states 1.1.1	Time to revision 404 days
2022-06-29published 2022-05-24	Package added to advisory	GHSA-72gx-qq2m-6xr2CVE-2019-10431	maven critical	not named as affected when the advisory was published, now names org.jenkins-ci.plugins:script-security	Time to revision 36 days
2022-06-29published 2022-06-02 to 2022-06-17	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 13 to 27 days
2022-06-29published 2022-06-17	same kind of change as the line above	GHSA-fr2w-mp56-g4xpCVE-2022-2111	same package and registry as the line abovehigh	same change as the line above	Time to revision 13 days
2022-06-29published 2022-06-02	same kind of change as the line above	GHSA-hj9c-8jmm-8c52CVE-2022-29244	same package and registry as the line abovehigh	same change as the line above	Time to revision 27 days
2022-06-29published 2021-01-20	Advisory severity changed	GHSA-49wp-qq6x-g2rfCVE-2020-28482	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 525 days
2022-06-29published 2022-06-23	Advisory severity changed	GHSA-jvxx-v45p-v5vfCVE-2022-31110	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 7 days
2022-06-29published 2022-06-17	Advisory severity changed	GHSA-rc57-9r3x-98cqCVE-2021-41411	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 13 days
2022-06-29published 2021-06-18	Advisory severity changed	GHSA-hpr6-f4vq-mxchCVE-2021-32090	whole advisorycritical	stated at publication MODERATE, now states CRITICALA CVSS version was added; the existing vectors stayed the same.	Time to revision 376 days
Tue 28 Jun 2022· 1 change
2022-06-28published 2022-06-24	Advisory withdrawn	GHSA-rwqr-c348-m5wrCVE-2022-33124	whole advisorymoderate	withdrawn 2022-06-28	Time to revision 5 days
Fri 24 Jun 2022· 1 change
2022-06-24published 2022-06-16	Advisory severity changed	GHSA-58jx-f5rf-qgqfCVE-2021-33036	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 9 days
Thu 23 Jun 2022· 4 changes
2022-06-23published 2022-06-15 to 2022-06-17	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 7 to 9 days
2022-06-23published 2022-06-15	same kind of change as the line above	GHSA-38j3-6fm8-pfgcCVE-2021-40660	same package and registry as the line abovehigh	same change as the line above	Time to revision 9 days
2022-06-23published 2022-06-17	same kind of change as the line above	GHSA-r45x-ghr2-qjxc	same package and registry as the line abovehigh	same change as the line above	Time to revision 7 days
2022-06-23published 2022-06-14	Advisory severity changed	GHSA-rmpj-7c96-mrg8CVE-2021-37404	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 10 days
2022-06-23published 2022-06-17	Advisory withdrawn	GHSA-r45x-ghr2-qjxc	whole advisoryhigh	withdrawn 2022-06-23	Time to revision 7 days
Tue 21 Jun 2022· 1 change
2022-06-21published 2022-03-08	Advisory severity changed	GHSA-w749-p3v6-hccqCVE-2022-21831	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 105 days
Mon 20 Jun 2022· 2 changes
2022-06-20published 2022-06-11	Advisory severity changed	GHSA-xvf7-4v9q-58w6CVE-2022-25851	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 10 days
2022-06-20published 2022-06-17	Advisory severity changed	GHSA-rh9j-f5f8-rvgcCVE-2022-31083	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 days
Fri 17 Jun 2022· 5 changes
2022-06-17published 2021-11-30	Package added to advisory	GHSA-fwf6-rw69-hhj4CVE-2021-23654	pypi moderate	not named as affected when the advisory was published, now names html-to-csv	Time to revision 199 days
2022-06-17published 2021-04-13	Package added to advisory	GHSA-53xj-v576-3ch2CVE-2019-10802	npm critical	not named as affected when the advisory was published, now names giting	Time to revision 430 days
2022-06-17published 2021-08-31	Advisory severity changed	GHSA-gmw6-94gg-2rc2CVE-2021-39135	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 290 days
2022-06-17published 2021-04-13	Advisory severity changed	GHSA-53xj-v576-3ch2CVE-2019-10802	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 430 days
2022-06-17published 2022-06-09	Advisory severity changed	GHSA-r48q-9g5r-8q2hCVE-2022-1996	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 9 days
Wed 15 Jun 2022· 2 changes
2022-06-15published 2022-06-07	Advisory severity changed	GHSA-pp3c-cf6j-m3ffCVE-2022-29631	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 9 days
2022-06-15published 2022-06-08	Advisory severity changed	GHSA-vv7q-mfpc-qgm5CVE-2022-31279	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 8 days
Tue 14 Jun 2022· 18 changes
2022-06-14published 2021-08-25	Package added to advisory	GHSA-458v-4hrf-g3m4CVE-2020-35920	crates.io moderate	not named as affected when the advisory was published, now names net2	Time to revision 293 days
2022-06-14published 2021-08-25	Advisory severity changed	GHSA-f3fg-5j9p-vchcCVE-2021-31153	whole advisorylow	stated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.	Time to revision 293 days
2022-06-14published 2021-08-25	Advisory severity changed	Show all 6 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 6 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 293 days
2022-06-14published 2021-08-25	same kind of change as the line above	GHSA-83r8-p8v6-6gfm	same package and registry as the line abovehigh	same change as the line above	Time to revision 293 days
2022-06-14published 2021-08-25	same kind of change as the line above	GHSA-8892-84wf-cg8f	same package and registry as the line abovehigh	same change as the line above	Time to revision 293 days
2022-06-14published 2021-08-25	same kind of change as the line above	GHSA-jf43-3v8j-qwwr	same package and registry as the line abovehigh	same change as the line above	Time to revision 293 days
2022-06-14published 2021-08-25	same kind of change as the line above	GHSA-gq4h-f254-7cw9	same package and registry as the line abovehigh	same change as the line above	Time to revision 293 days
2022-06-14published 2021-08-25	same kind of change as the line above	GHSA-m296-j53x-xv95	same package and registry as the line abovehigh	same change as the line above	Time to revision 293 days
2022-06-14published 2021-08-25	same kind of change as the line above	GHSA-r88h-6987-g79f	same package and registry as the line abovehigh	same change as the line above	Time to revision 293 days
2022-06-14published 2021-08-25	Advisory severity changed	GHSA-m9m5-cg5h-r582CVE-2020-35926	whole advisorymoderate	stated at publication CRITICAL, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 293 days
2022-06-14published 2021-08-25	Advisory severity changed	GHSA-vhfr-v4w9-45v8CVE-2019-16142	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 293 days
2022-06-14published 2021-08-25	Advisory severity changed	GHSA-7j44-fv4x-79g9CVE-2019-16141	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 293 days
2022-06-14published 2022-06-03	Advisory severity changed	GHSA-xhp9-4947-rq78CVE-2022-31799	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 12 days
2022-06-14published 2022-06-03	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 12 days
2022-06-14published 2022-06-03	same kind of change as the line above	GHSA-4qf6-vpj8-p4r6CVE-2022-30349	same package and registry as the line abovemoderate	same change as the line above	Time to revision 12 days
2022-06-14published 2022-06-03	same kind of change as the line above	GHSA-2927-hv3p-f3vpCVE-2022-29718	same package and registry as the line abovemoderate	same change as the line above	Time to revision 12 days
2022-06-14published 2022-06-03	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 3 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 12 days
2022-06-14published 2022-06-03	same kind of change as the line above	GHSA-6xj9-hpq3-w3qwCVE-2022-30506	same package and registry as the line abovecritical	same change as the line above	Time to revision 12 days
2022-06-14published 2022-06-03	same kind of change as the line above	GHSA-526x-rm7j-v389CVE-2022-30324	same package and registry as the line abovecritical	same change as the line above	Time to revision 12 days
2022-06-14published 2022-06-03	same kind of change as the line above	GHSA-fj34-jhjx-xmvvCVE-2021-33473	same package and registry as the line abovecritical	same change as the line above	Time to revision 12 days
2022-06-14published 2022-06-03	Advisory severity changed	GHSA-fp36-299x-pwmwCVE-2022-1929	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 12 days
Fri 10 Jun 2022· 10 changes
2022-06-10published 2022-05-21	Package added to advisory	GHSA-wm7h-9275-46v2CVE-2022-24434	maven high	not named as affected when the advisory was published, now names org.webjars.npm:dicer	Time to revision 20 days
2022-06-10published 2021-08-25	Advisory severity changed	GHSA-pfjq-935c-4895	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 289 days
2022-06-10published 2022-05-25	Advisory severity changed	GHSA-rf6q-vx79-mjxrCVE-2021-3629	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 17 days
2022-06-10published 2021-09-20	Advisory severity changed	GHSA-f6jp-j6w3-w9hmCVE-2021-41303	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 263 days
2022-06-10published 2022-05-27	Advisory severity changed	GHSA-c75v-2vq8-878fCVE-2021-4231	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 14 days
2022-06-10published 2022-04-27 to 2022-05-26	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 15 to 43 days
2022-06-10published 2022-05-26	same kind of change as the line above	GHSA-5hqc-x78w-3cmwCVE-2022-29405	same package and registry as the line abovemoderate	same change as the line above	Time to revision 15 days
2022-06-10published 2022-04-27	same kind of change as the line above	GHSA-mm33-5vfq-3mm3CVE-2022-22577	same package and registry as the line abovemoderate	same change as the line above	Time to revision 43 days
2022-06-10published 2022-05-25	Advisory severity changed	GHSA-hj57-j5cw-2mwpCVE-2022-1706	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 15 days
2022-06-10published 2022-05-22	Advisory severity changed	GHSA-fh55-vwjc-69c7CVE-2022-31267	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 19 days
2022-06-10published 2022-02-16	Advisory severity changed	GHSA-qc84-gqf4-9926CVE-2022-23639	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 113 days
Thu 9 Jun 2022· 2 changes
2022-06-09published 2021-04-27	Advisory severity changed	GHSA-35q2-47q7-3pc3CVE-2021-29469	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 408 days
2022-06-09published 2021-01-29	Advisory severity changed	GHSA-vhhw-xjvf-wprrCVE-2021-23326	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 496 days
Wed 8 Jun 2022· 1 change
2022-06-08published 2022-05-18	Advisory withdrawn	GHSA-mjqc-5c9x-xfcc	whole advisorymoderate	withdrawn 2022-06-08	Time to revision 22 days
Fri 3 Jun 2022· 5 changes
2022-06-03published 2022-05-20 to 2022-05-22	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 3 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 13 to 15 days
2022-06-03published 2022-05-20	same kind of change as the line above	GHSA-hp87-p4gw-j4gqCVE-2022-28948	same package and registry as the line abovehigh	same change as the line above	Time to revision 15 days
2022-06-03published 2022-05-22	same kind of change as the line above	GHSA-ffx3-8qvm-pq3jCVE-2022-31264	same package and registry as the line abovehigh	same change as the line above	Time to revision 13 days
2022-06-03published 2022-05-22	same kind of change as the line above	GHSA-2c65-rq62-fqhqCVE-2022-31268	same package and registry as the line abovehigh	same change as the line above	Time to revision 13 days
2022-06-03published 2022-05-20 to 2022-05-22	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 13 to 15 days
2022-06-03published 2022-05-20	same kind of change as the line above	GHSA-hh32-7344-cg2fCVE-2022-22978	same package and registry as the line abovecritical	same change as the line above	Time to revision 15 days
2022-06-03published 2022-05-22	same kind of change as the line above	GHSA-qx32-f6g6-fcfrCVE-2022-31259	same package and registry as the line abovecritical	same change as the line above	Time to revision 13 days
Thu 2 Jun 2022· 4 changes
2022-06-02published 2021-10-06	Package added to advisory	GHSA-pfwg-rxf4-97c3CVE-2021-28125	pypi moderate	not named as affected when the advisory was published, now names apache-superset	Time to revision 239 days
2022-06-02published 2021-11-16	Advisory severity changed	GHSA-qg54-694p-wgppCVE-2021-41817	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 199 days
2022-06-02published 2022-04-26	Advisory severity changed	GHSA-6jmm-mp6w-4rrgCVE-2022-29546	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 37 days
2022-06-02published 2022-04-26	Advisory severity changed	GHSA-vx9g-377x-xwxqCVE-2022-27311	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 38 days
Wed 1 Jun 2022· 3 changes
2022-06-01published 2022-05-20	Advisory severity changed	GHSA-x7f3-62pm-9p38CVE-2022-28946	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 13 days
2022-06-01published 2022-05-18	Advisory severity changed	GHSA-mjqc-5c9x-xfcc	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 15 days
2022-06-01published 2022-05-18	Advisory severity changed	GHSA-c5wc-v287-82pcCVE-2022-30689	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 15 days
Fri 27 May 2022· 26 changes
2022-05-27published 2022-04-20	Advisory fix version moved	GHSA-x2w5-725j-gf2gCVE-2022-22143	npmconvict high	stated at publication 6.2.2, now states 6.2.3	Time to revision 37 days
2022-05-27published 2022-04-05	Advisory fix version moved	GHSA-jj47-x69x-mxrmCVE-2022-24795	rubygemsyajl-ruby moderate	stated at publication 1.4.2, now states 1.4.3	Time to revision 52 days
2022-05-27published 2021-12-09	Package added to advisory	GHSA-qrmm-w75w-3wpx	npm moderate	not named as affected when the advisory was published, now names swagger-ui-react	Time to revision 169 days
2022-05-27published 2022-05-05 to 2022-05-17	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 2 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 11 to 22 days
2022-05-27published 2022-05-17	same kind of change as the line above	GHSA-qj93-37f5-mr29CVE-2021-33318	same package and registry as the line abovecritical	same change as the line above	Time to revision 11 days
2022-05-27published 2022-05-05	same kind of change as the line above	GHSA-jf66-3q76-h5p5CVE-2022-1053	same package and registry as the line abovecritical	same change as the line above	Time to revision 22 days
2022-05-27published 2020-05-26 to 2020-07-07	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 3 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 689 to 731 days
2022-05-27published 2020-05-26	same kind of change as the line above	GHSA-8727-m6gj-mc37CVE-2020-8164	same package and registry as the line abovehigh	same change as the line above	Time to revision 731 days
2022-05-27published 2020-07-07	same kind of change as the line above	GHSA-cr3x-7m39-c6jqCVE-2020-8163	same package and registry as the line abovehigh	same change as the line above	Time to revision 689 days
2022-05-27published 2020-07-06	same kind of change as the line above	GHSA-5f9h-9pjv-v6j7CVE-2020-8161	same package and registry as the line abovehigh	same change as the line above	Time to revision 690 days
2022-05-27published 2020-05-26	Advisory severity changed	GHSA-m42x-37p3-fv5wCVE-2020-8162	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 731 days
2022-05-27published 2020-05-26	Advisory severity changed	GHSA-2p68-f74v-9wc6CVE-2020-8165	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 731 days
2022-05-27published 2020-09-02	Advisory severity changed	GHSA-pp7h-53gx-mx7rCVE-2020-8244	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 632 days
2022-05-27published 2022-02-15	Advisory severity changed	GHSA-h5rh-w6vm-9ghcCVE-2021-27358	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 102 days
2022-05-27published 2021-02-05 to 2021-05-06	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 386 to 476 days
2022-05-27published 2021-05-06	same kind of change as the line above	GHSA-9m6j-fcg5-2442CVE-2021-27515	same package and registry as the line abovemoderate	same change as the line above	Time to revision 386 days
2022-05-27published 2021-02-05	same kind of change as the line above	GHSA-f4hq-453j-p95fCVE-2021-3189	same package and registry as the line abovemoderate	same change as the line above	Time to revision 476 days
2022-05-27published 2021-03-01	Advisory severity changed	GHSA-p6j9-7xhc-rhwpCVE-2021-27516	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 452 days
2022-05-27published 2021-03-29	Advisory severity changed	GHSA-pq64-v7f5-gqh8CVE-2021-27291	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Time to revision 424 days
2022-05-27published 2021-02-08 to 2021-09-20	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 249 to 473 days
2022-05-27published 2021-02-08	same kind of change as the line above	GHSA-rrqm-p222-8ph2CVE-2021-21304	same package and registry as the line abovehigh	same change as the line above	Time to revision 473 days
2022-05-27published 2021-09-20	same kind of change as the line above	GHSA-44c6-4v22-4mhxCVE-2021-3795	same package and registry as the line abovehigh	same change as the line above	Time to revision 249 days
2022-05-27published 2021-09-20	Advisory severity changed	GHSA-rp65-9cf3-cjxrCVE-2021-3803	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 249 days
2022-05-27published 2021-11-19	Advisory severity changed	GHSA-896r-f27r-55mwCVE-2021-3918	whole advisorycritical	stated at publication MODERATE, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 189 days
2022-05-27published 2021-09-27	Advisory severity changed	GHSA-3c9c-2p65-qvwvCVE-2021-41097	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 242 days
2022-05-27published 2022-04-27 to 2022-05-05	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 3 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 23 to 31 days
2022-05-27published 2022-05-05	same kind of change as the line above	GHSA-6346-5r4h-ff5xCVE-2022-1555	same package and registry as the line abovemoderate	same change as the line above	Time to revision 23 days
2022-05-27published 2022-04-27	same kind of change as the line above	GHSA-f32v-vf79-p29qCVE-2022-1466	same package and registry as the line abovemoderate	same change as the line above	Time to revision 31 days
2022-05-27published 2022-05-03	same kind of change as the line above	GHSA-jmhj-vh4q-hhmqCVE-2022-24902	same package and registry as the line abovemoderate	same change as the line above	Time to revision 25 days
2022-05-27published 2022-04-30	Advisory severity changed	GHSA-9hgc-wpc5-v8p9CVE-2022-1530	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 28 days
2022-05-27published 2022-04-26	Advisory severity changed	GHSA-phwq-j96m-2c2qCVE-2022-29078	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 32 days

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →