Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

5,026 advisory changes · newest first · grouped by day

Counted changes, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Advisory, Which advisory was edited, by its GHSA id.	Package, The package the advisory names, and the registry it comes from.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Fri 31 Oct 2025· 1 change
2025-10-31published 2025-09-24	Advisory severity changed	GHSA-6xv4-9cqp-92rhCVE-2025-57353	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 37 days
Thu 30 Oct 2025· 1 change
2025-10-30published 2025-10-21	Package added to advisory	GHSA-qqj3-g7mx-5p4wCVE-2025-54470	go high	not named as affected when the advisory was published, now names github.com/neuvector/neuvector	Time to revision 9 days
Wed 29 Oct 2025· 1 change
2025-10-29published 2025-08-20	Package added to advisory	GHSA-p72g-pv48-7w9xCVE-2025-54988	maven critical	not named as affected when the advisory was published, now names org.apache.tika:tika-parsers	Time to revision 70 days
Mon 27 Oct 2025· 1 change
2025-10-27published 2025-09-24	Advisory fix version moved	GHSA-4xh5-x5gv-qwphCVE-2025-8869	pypipip moderate	stated at publication 25.2, now states 25.3	Time to revision 6 days
Fri 24 Oct 2025· 2 changes
2025-10-24published 2025-10-14	Advisory severity changed	GHSA-7mvr-c777-76hpCVE-2025-59288	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 10 days
2025-10-24published 2025-10-22	Advisory severity changed	GHSA-gr7h-xw4f-wh86CVE-2025-62710	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 2 days
Wed 22 Oct 2025· 4 changes
2025-10-22published 2022-05-17	Advisory severity changed	GHSA-mrfm-jxgf-2h6vCVE-2014-3120	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 1,255 days
2025-10-22published 2022-05-04 to 2022-05-13	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 1,268 days
2025-10-22published 2022-05-13	same kind of change as the line above	GHSA-47qp-8v9g-39hpCVE-2013-2251	same package and registry as the line abovecritical	same change as the line above	Duration unknown
2025-10-22published 2022-05-04	same kind of change as the line above	GHSA-4wrr-9h5r-m92wCVE-2012-0391	same package and registry as the line abovecritical	same change as the line above	Time to revision 1,268 days
2025-10-22published 2017-10-24	Advisory severity changed	GHSA-6x85-j5j2-27jxCVE-2014-0130	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Duration unknown
Tue 21 Oct 2025· 1 change
2025-10-21published 2025-10-14	Advisory severity changed	GHSA-mq77-rv97-285mCVE-2025-62172	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 7 days
Mon 20 Oct 2025· 4 changes
2025-10-20published 2021-04-13	Package added to advisory	GHSA-r96p-v3cr-gfv8CVE-2020-28470	npm high	not named as affected when the advisory was published, now names @scullyio/ng-lib	Duration unknown
2025-10-20published 2025-10-10	Advisory severity changed	GHSA-gj5f-73vh-wpf7CVE-2025-11569	whole advisorylow	stated at publication HIGH, now states LOWCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 11 days
2025-10-20published 2025-09-24 to 2025-10-10	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2025-10-20Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2025-10-20	whole advisorylow	withdrawn 2025-10-20	Time to revision 11 to 26 days
2025-10-20published 2025-10-10	same kind of change as the line above	GHSA-gj5f-73vh-wpf7CVE-2025-11569	same package and registry as the line abovelow	withdrawn 2025-10-20	Time to revision 11 days
2025-10-20published 2025-09-24	same kind of change as the line above	GHSA-m929-rg27-gj99	same package and registry as the line abovelow	withdrawn 2025-10-20	Time to revision 26 days
Fri 17 Oct 2025· 1 change
2025-10-17published 2024-07-01	Advisory withdrawn	GHSA-9v2f-6vcg-3hgvCVE-2024-39236	whole advisorycritical	withdrawn 2025-10-17	Time to revision 473 days
Wed 15 Oct 2025· 1 change
2025-10-15published 2025-05-21	Package added to advisory	GHSA-9pp5-9c7g-4r83CVE-2025-41232	maven critical	not named as affected when the advisory was published, now names org.springframework.security:spring-security-core	Time to revision 147 days
Tue 14 Oct 2025· 1 change
2025-10-14published 2021-12-16	Advisory withdrawn	GHSA-q6gq-997w-f55gCVE-2020-16845	whole advisoryhigh	withdrawn 2025-10-14	Time to revision 1,398 days
Mon 13 Oct 2025· 7 changes
2025-10-13published 2025-10-03	Advisory fix version moved	GHSA-964p-j4gg-mhwcCVE-2025-50538	npmflowise critical	stated at publication 2.2.7-patch.1, now states 3.0.8	Time to revision 10 days
2025-10-13published 2025-10-13	Package added to advisory	GHSA-3cm9-jrf5-h2cxCVE-2025-62242	maven moderate	not named as affected when the advisory was published, now names com.liferay:com.liferay.change.tracking.web	Time to revision 0 days
2025-10-13published 2023-06-14	Package added to advisory	GHSA-4g42-gqrg-4633CVE-2023-34396	maven high	not named as affected when the advisory was published, now names org.apache.struts:struts-core	Time to revision 852 days
2025-10-13published 2022-05-13 to 2023-06-14	Package added to advisory	Show all 4 advisories in this change: Package added to advisory: struts:struts named as affected in mavenHide the 4 advisories in this change: Package added to advisory: struts:struts named as affected in maven	maven high	not named as affected when the advisory was published, now names struts:struts	Time to revision 852 days
2025-10-13published 2023-06-14	same kind of change as the line above	GHSA-4g42-gqrg-4633CVE-2023-34396	same package registry as the line abovehigh	same change as the line above	Time to revision 852 days
2025-10-13published 2022-05-13	same kind of change as the line above	GHSA-7jw3-5q4w-89qgCVE-2016-1181	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-10-13published 2022-05-13	same kind of change as the line above	GHSA-5ggr-mpgw-3mgxCVE-2016-1182	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-10-13published 2022-05-14	same kind of change as the line above	GHSA-cvvx-r33m-v7pqCVE-2015-0899	same package registry as the line abovehigh	same change as the line above	Duration unknown
Fri 10 Oct 2025· 1 change
2025-10-10published 2023-08-08	Package added to advisory	GHSA-rg2c-cfxv-qp6fCVE-2023-3894	maven high	not named as affected when the advisory was published, now names com.fasterxml.jackson.dataformat:jackson-dataformat-toml	Time to revision 794 days
Thu 9 Oct 2025· 1 change
2025-10-09published 2024-07-11	Advisory withdrawn	GHSA-vc8w-jr9v-vj7fCVE-2024-6531	whole advisorymoderate	withdrawn 2025-10-09	Time to revision 455 days
Wed 8 Oct 2025· 2 changes
2025-10-08published 2022-04-17 to 2025-08-21	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2025-10-08Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2025-10-08	whole advisorymoderate	withdrawn 2025-10-08	Time to revision 48 to 1,271 days
2025-10-08published 2025-08-21	same kind of change as the line above	GHSA-w2wj-hw98-233h	same package and registry as the line abovemoderate	withdrawn 2025-10-08	Time to revision 48 days
2025-10-08published 2022-04-17	same kind of change as the line above	GHSA-7gc6-qh9x-w6h8CVE-2022-1365	same package and registry as the line abovemoderate	withdrawn 2025-10-08	Time to revision 1,271 days
Mon 6 Oct 2025· 7 changes
2025-10-06published 2025-07-11 to 2025-08-08	Package added to advisory	Show all 6 advisories in this change: Package added to advisory: org.pytorch:executorch-android named as affected in mavenHide the 6 advisories in this change: Package added to advisory: org.pytorch:executorch-android named as affected in maven	maven 2 bands	not named as affected when the advisory was published, now names org.pytorch:executorch-android	Time to revision 60 to 87 days
2025-10-06published 2025-07-11	same kind of change as the line above	GHSA-h952-963h-rv99CVE-2025-30402	same package registry as the line abovehigh	same change as the line above	Time to revision 87 days
2025-10-06published 2025-08-08	same kind of change as the line above	GHSA-84m3-f99p-cqx5CVE-2025-30405	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
2025-10-06published 2025-08-08	same kind of change as the line above	GHSA-hj95-mhgf-jxc4CVE-2025-30404	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
2025-10-06published 2025-08-08	same kind of change as the line above	GHSA-xc7w-r669-48pfCVE-2025-54951	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
2025-10-06published 2025-08-08	same kind of change as the line above	GHSA-9m39-3mf3-xwchCVE-2025-54949	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
2025-10-06published 2025-08-08	same kind of change as the line above	GHSA-f9hx-c6jf-3qxmCVE-2025-54950	same package registry as the line abovecritical	same change as the line above	Time to revision 60 days
2025-10-06published 2025-08-14	Advisory withdrawn	GHSA-xqrq-4mgf-ff32CVE-2025-50817	whole advisoryhigh	withdrawn 2025-10-06	Time to revision 53 days
Fri 3 Oct 2025· 2 changes
2025-10-03published 2025-09-30	Package added to advisory	GHSA-27w5-gj5q-82fvCVE-2025-11149	npm high	not named as affected when the advisory was published, now names @nubosoftware/node-static	Time to revision 3 days
2025-10-03published 2025-08-14	Advisory withdrawn	GHSA-q4xx-mc3q-23x8	whole advisorycritical	withdrawn 2025-10-03	Time to revision 50 days
Tue 30 Sep 2025· 37 changes
2025-09-30published 2022-05-17 to 2023-11-22	Package added to advisory	Show all 6 advisories in this change: Package added to advisory: 36 packages named as affected in mavenHide the 6 advisories in this change: Package added to advisory: 36 packages named as affected in maven36 rows, one per advisory and package	maven 3 bands	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.7.7 and 35 more	Time to revision 679 to 1,233 days
2025-09-30published 2022-05-17	same kind of change as the line above	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.7.7	Time to revision 1,233 days
2025-09-30published 2022-05-17	same kind of change as the line above	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.8.0	Time to revision 1,233 days
2025-09-30published 2022-05-17	same kind of change as the line above	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.8.1	Time to revision 1,233 days
2025-09-30published 2022-05-17	same kind of change as the line above	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.8.2	Time to revision 1,233 days
2025-09-30published 2022-05-17	same kind of change as the line above	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.9.0	Time to revision 1,233 days
2025-09-30published 2022-05-17	same kind of change as the line above	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.9.0-1	Time to revision 1,233 days
2025-09-30published 2022-05-17	same kind of change as the line above	GHSA-jf9v-fxfq-wm76CVE-2013-3300	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names net.liftweb:lift-webkit_2.9.1	Time to revision 1,233 days
2025-09-30published 2022-06-28	same kind of change as the line above	GHSA-ww3v-6xjf-jv28CVE-2018-18855	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names io.spray:spray-json_2.10	Duration unknown
28 more rows in this change are not listed here. Open all 36 rows →
2025-09-30published 2020-09-03	Package added to advisory	GHSA-g64q-3vg8-8f93	npm high	not named as affected when the advisory was published, now names pez	Duration unknown
Mon 29 Sep 2025· 2 changes
2025-09-29published 2020-09-03	Package added to advisory	GHSA-5854-jvxx-2cg9	npm high	not named as affected when the advisory was published, now names content	Duration unknown
2025-09-29published 2025-08-13	Package added to advisory	GHSA-prj3-ccx8-p6x4CVE-2025-55163	maven high	not named as affected when the advisory was published, now names io.grpc:grpc-netty-shaded	Time to revision 47 days
Sat 27 Sep 2025· 1 change
2025-09-27published 2025-09-24	Advisory severity changed	GHSA-776q-jw43-fhjxCVE-2025-48459	whole advisorycritical	stated at publication HIGH, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 3 days
Fri 26 Sep 2025· 15 changes
2025-09-26published 2025-09-24	Advisory fix version moved	GHSA-vj76-c3g6-qr5vCVE-2025-59343	npmtar-fs high	stated at publication 1.16.5, now states 1.16.6	Time to revision 2 days
2025-09-26published 2025-09-24	Advisory fix version moved	GHSA-vj76-c3g6-qr5vCVE-2025-59343	npmtar-fs high	stated at publication 2.1.3, now states 2.1.4	Time to revision 2 days
2025-09-26published 2020-09-03	Package added to advisory	GHSA-g9cg-h3jm-cwrc	npm high	not named as affected when the advisory was published, now names @hapi/pez	Duration unknown
2025-09-26published 2025-09-17	Package added to advisory	Show all 11 advisories in this change: Package added to advisory: d7y.io/dragonfly/v2 named as affected in goHide the 11 advisories in this change: Package added to advisory: d7y.io/dragonfly/v2 named as affected in go	go 3 bands	not named as affected when the advisory was published, now names d7y.io/dragonfly/v2	Time to revision 9 to 9 days
2025-09-26published 2025-09-17	same kind of change as the line above	GHSA-mcvp-rpgg-9273CVE-2025-59410	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	same kind of change as the line above	GHSA-hx2h-vjw2-8r54CVE-2025-59354	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	same kind of change as the line above	GHSA-255v-qv84-29p5CVE-2025-59353	same package registry as the line abovehigh	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	same kind of change as the line above	GHSA-79hx-3fp8-hj66CVE-2025-59352	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	same kind of change as the line above	GHSA-4mhv-8rh3-4ghwCVE-2025-59351	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	same kind of change as the line above	GHSA-c2fc-9q9c-5486CVE-2025-59350	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	same kind of change as the line above	GHSA-8425-8r2f-mrv6CVE-2025-59349	same package registry as the line abovelow	same change as the line above	Time to revision 9 days
2025-09-26published 2025-09-17	same kind of change as the line above	GHSA-2qgr-gfvj-qpcrCVE-2025-59348	same package registry as the line abovemoderate	same change as the line above	Time to revision 9 days
3 more rows in this change are not listed here. Open all 11 rows →
2025-09-26published 2025-09-15	Advisory withdrawn	GHSA-qhwp-454g-2gv4	whole advisorymoderate	withdrawn 2025-09-26	Time to revision 12 days
Thu 25 Sep 2025· 4 changes
2025-09-25published 2020-09-03	Package added to advisory	GHSA-3wqh-h42r-x8fq	npm high	not named as affected when the advisory was published, now names @hapi/content	Duration unknown
2025-09-25published 2025-09-15 to 2025-09-17	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: LOW → MODERATEHide the 2 advisories in this change: Advisory severity changed: LOW → MODERATE	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 8 to 10 days
2025-09-25published 2025-09-17	same kind of change as the line above	GHSA-9pw5-wx67-q964CVE-2025-10619	same package and registry as the line abovemoderate	same change as the line above	Time to revision 8 days
2025-09-25published 2025-09-15	same kind of change as the line above	GHSA-hjm5-xgj8-vwj6CVE-2025-59376	same package and registry as the line abovemoderate	same change as the line above	Time to revision 10 days
2025-09-25published 2025-09-15	Advisory severity changed	GHSA-4hqq-7q79-932pCVE-2025-59377	whole advisorycritical	stated at publication LOW, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 10 days
Wed 24 Sep 2025· 4 changes
2025-09-24published 2022-09-23 to 2022-10-25	Package added to advisory	Show all 3 advisories in this change: Package added to advisory: org.apache.xmlgraphics:batik-bridge named as affected in mavenHide the 3 advisories in this change: Package added to advisory: org.apache.xmlgraphics:batik-bridge named as affected in maven	maven 2 bands	not named as affected when the advisory was published, now names org.apache.xmlgraphics:batik-bridge	Duration unknown
2025-09-24published 2022-10-25	same kind of change as the line above	GHSA-rwqr-m72q-v6cmCVE-2022-42890	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-24published 2022-09-23	same kind of change as the line above	GHSA-53jm-3hc9-fqqcCVE-2022-38648	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-24published 2022-09-23	same kind of change as the line above	GHSA-c5xv-qc8p-mh2vCVE-2022-38398	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-24published 2025-08-11	Advisory severity changed	GHSA-qpjq-c5hr-7925CVE-2025-54478	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 44 days
Tue 23 Sep 2025· 6 changes
2025-09-23published 2023-03-28	Package added to advisory	GHSA-7phw-cxx7-q9vqCVE-2023-20860	maven critical	not named as affected when the advisory was published, now names org.springframework:spring-webmvc	Time to revision 911 days
2025-09-23published 2025-09-18	Advisory severity changed	GHSA-vv9c-xxg7-wmv7CVE-2025-6237	whole advisorycritical	stated at publication HIGH, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 6 days
2025-09-23published 2025-09-22	Advisory severity changed	GHSA-j2xj-h7w5-r7vpCVE-2025-59526	whole advisorymoderate	stated at publication LOW, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 1 days
2025-09-23published 2025-08-18 to 2025-09-10	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: LOW → MODERATEHide the 3 advisories in this change: Advisory severity changed: LOW → MODERATE	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 13 to 37 days
2025-09-23published 2025-08-18	same kind of change as the line above	GHSA-xfp8-x3j6-h67vCVE-2025-9096	same package and registry as the line abovemoderate	same change as the line above	Time to revision 37 days
2025-09-23published 2025-08-18	same kind of change as the line above	GHSA-q4rg-7cjj-5r86CVE-2025-9095	same package and registry as the line abovemoderate	same change as the line above	Time to revision 37 days
2025-09-23published 2025-09-10	same kind of change as the line above	GHSA-xp8g-32qh-mv28CVE-2025-57520	same package and registry as the line abovemoderate	same change as the line above	Time to revision 13 days
Mon 22 Sep 2025· 2 changes
2025-09-22published 2025-09-11 to 2025-09-16	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: LOW → MODERATEHide the 2 advisories in this change: Advisory severity changed: LOW → MODERATE	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 6 to 12 days
2025-09-22published 2025-09-16	same kind of change as the line above	GHSA-mp7c-m3rh-r56vCVE-2025-59160	same package and registry as the line abovemoderate	same change as the line above	Time to revision 6 days
2025-09-22published 2025-09-11	same kind of change as the line above	GHSA-33vc-wfww-vjfvCVE-2025-9910	same package and registry as the line abovemoderate	same change as the line above	Time to revision 12 days
Thu 18 Sep 2025· 3 changes
2025-09-18published 2025-09-10	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 3 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.	Time to revision 8 to 8 days
2025-09-18published 2025-09-10	same kind of change as the line above	GHSA-jgw4-cr84-mqxgCVE-2025-10155	same package and registry as the line abovecritical	same change as the line above	Time to revision 8 days
2025-09-18published 2025-09-10	same kind of change as the line above	GHSA-mjqp-26hc-grxgCVE-2025-10156	same package and registry as the line abovecritical	same change as the line above	Time to revision 8 days
2025-09-18published 2025-09-10	same kind of change as the line above	GHSA-f7qq-56ww-84crCVE-2025-10157	same package and registry as the line abovecritical	same change as the line above	Time to revision 8 days
Wed 17 Sep 2025· 1 change
2025-09-17published 2025-08-06	Advisory withdrawn	GHSA-qj5r-2r5p-phc7	whole advisorymoderate	withdrawn 2025-09-17	Time to revision 42 days
Tue 16 Sep 2025· 1 change
2025-09-16published 2021-07-27	Package added to advisory	GHSA-2363-cqg2-863cCVE-2021-33813	maven high	not named as affected when the advisory was published, now names org.jdom:jdom2	Duration unknown
Mon 15 Sep 2025· 1 change
2025-09-15published 2025-09-12	Advisory fix version moved	GHSA-wgpv-6j63-x5phCVE-2025-58434	npmflowise critical	stated at publication 3.0.5, now states 3.0.6	Time to revision 3 days
Fri 12 Sep 2025· 15 changes
2025-09-12published 2020-01-08 to 2025-06-03	Package added to advisory	Show all 4 advisories in this change: Package added to advisory: org.hibernate:hibernate-validator named as affected in mavenHide the 4 advisories in this change: Package added to advisory: org.hibernate:hibernate-validator named as affected in maven	maven moderate	not named as affected when the advisory was published, now names org.hibernate:hibernate-validator	Time to revision 101 to 309 days
2025-09-12published 2025-06-03	same kind of change as the line above	GHSA-7v6m-28jr-rg84CVE-2025-35036	same package registry as the line abovemoderate	same change as the line above	Time to revision 101 days
2025-09-12published 2021-06-04	same kind of change as the line above	GHSA-rmrm-75hp-phr2CVE-2020-10693	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-12published 2020-01-08	same kind of change as the line above	GHSA-m8p2-495h-ccmhCVE-2019-10219	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-12published 2024-11-07	same kind of change as the line above	GHSA-x83m-pf6f-pf9gCVE-2023-1932	same package registry as the line abovemoderate	same change as the line above	Time to revision 309 days
2025-09-12published 2018-10-16 to 2018-10-18	Package added to advisory	Show all 11 advisories in this change: Package added to advisory: org.bouncycastle:bcprov-jdk15on named as affected in mavenHide the 11 advisories in this change: Package added to advisory: org.bouncycastle:bcprov-jdk15on named as affected in maven	maven 3 bands	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-jdk15on	Duration unknown
2025-09-12published 2018-10-17	same kind of change as the line above	GHSA-4mv7-cq75-3qjmCVE-2015-7940	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-12published 2018-10-17	same kind of change as the line above	GHSA-r97x-3g8f-gx3mCVE-2016-1000340	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-12published 2018-10-17	same kind of change as the line above	GHSA-4vhj-98r6-424hCVE-2016-1000338	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-12published 2018-10-16	same kind of change as the line above	GHSA-xqj7-j8j5-f2xrCVE-2018-1000180	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-12published 2018-10-17	same kind of change as the line above	GHSA-w285-wf9q-5w69CVE-2016-1000352	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-09-12published 2018-10-18	same kind of change as the line above	GHSA-9gp4-qrff-c648CVE-2016-1000345	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-09-12published 2018-10-17	same kind of change as the line above	GHSA-fjqm-246c-mwqgCVE-2016-1000346	same package registry as the line abovelow	same change as the line above	Duration unknown
2025-09-12published 2018-10-18	same kind of change as the line above	GHSA-2j2x-hx4g-2gf4CVE-2016-1000344	same package registry as the line abovehigh	same change as the line above	Duration unknown
3 more rows in this change are not listed here. Open all 11 rows →
Thu 11 Sep 2025· 1 change
2025-09-11published 2024-07-11	Advisory withdrawn	GHSA-9mvj-f7w8-pvh2CVE-2024-6484	whole advisorymoderate	withdrawn 2025-09-11	Time to revision 427 days
Tue 9 Sep 2025· 1 change
2025-09-09published 2025-09-09	Advisory fix version moved	GHSA-w62p-hx95-gf2cCVE-2025-59037	npm@duckdb/duckdb-wasm high	stated at publication 1.29.3, now states 1.30.0	Time to revision 0 days
Mon 8 Sep 2025· 1 change
2025-09-08published 2025-07-09	Package added to advisory	GHSA-q92v-3f4w-5xg8CVE-2025-53742	maven moderate	not named as affected when the advisory was published, now names org.jenkins-ci.plugins:applitools-eyes	Time to revision 61 days
Fri 5 Sep 2025· 1 change
2025-09-05published 2025-09-04	Advisory severity changed	GHSA-fghv-69vj-qj49CVE-2025-58056	whole advisorylow	stated at publication HIGH, now states LOWCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 1 days
Tue 2 Sep 2025· 7 changes
2025-09-02published 2022-05-14	Package added to advisory	GHSA-xjgh-84hx-56c5Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-xjgh-84hx-56c5Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-xjgh-84hx-56c5	maven high	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core and 1 more	Duration unknown
2025-09-02published 2022-05-14	same kind of change as the line above	GHSA-xjgh-84hx-56c5CVE-2017-12617	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Duration unknown
2025-09-02published 2022-05-14	same kind of change as the line above	GHSA-xjgh-84hx-56c5CVE-2017-12617	same package registry as the line abovehigh	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-catalina	Duration unknown
2025-09-02published 2022-05-14	Package added to advisory	GHSA-w3j5-q8f2-3cqqCVE-2016-8745	maven high	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-util	Duration unknown
2025-09-02published 2023-03-10	Package added to advisory	GHSA-vp98-w2p3-mv35CVE-2023-26464	maven high	not named as affected when the advisory was published, now names log4j:log4j	Time to revision 907 days
2025-09-02published 2022-05-17	Package added to advisory	GHSA-rpjm-422r-95mhCVE-2022-30126	maven moderate	not named as affected when the advisory was published, now names org.apache.tika:tika-core	Duration unknown
2025-09-02published 2022-03-12	Package added to advisory	GHSA-cr3q-pqgq-m8c2CVE-2018-25031	maven moderate	not named as affected when the advisory was published, now names org.webjars:swagger-ui	Duration unknown
2025-09-02published 2018-10-17	Package added to advisory	GHSA-qcj7-g2j5-g7r3CVE-2016-1000342	maven high	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-jdk15on	Duration unknown
Fri 29 Aug 2025· 5 changes
2025-08-29published 2025-08-28	Advisory fix version moved	GHSA-jc7w-c686-c4v9CVE-2025-58058	gogithub.com/ulikunitz/xz moderate	stated at publication 0.5.14, now states 0.5.15	Time to revision 1 days
2025-08-29published 2025-08-20	Package added to advisory	GHSA-mpww-r37c-vxjwCVE-2025-43746	maven moderate	not named as affected when the advisory was published, now names ccom.liferay:com.liferay.dynamic.data.mapping.web	Time to revision 9 days
2025-08-29published 2022-05-14 to 2025-08-20	Advisory withdrawn	Show all 3 advisories in this change: Advisory withdrawn: withdrawn 2025-08-29Hide the 3 advisories in this change: Advisory withdrawn: withdrawn 2025-08-29	whole advisory2 bands	withdrawn 2025-08-29	Time to revision 10 to 1,204 days
2025-08-29published 2022-05-14	same kind of change as the line above	GHSA-7mj4-2984-955fCVE-2018-18307	same package and registry as the line abovemoderate	withdrawn 2025-08-29	Time to revision 1,204 days
2025-08-29published 2025-08-20	same kind of change as the line above	GHSA-xh9h-692f-mmg4CVE-2025-54364	same package and registry as the line abovelow	withdrawn 2025-08-29	Time to revision 10 days
2025-08-29published 2025-08-20	same kind of change as the line above	GHSA-6fxp-p9mg-q64wCVE-2025-54363	same package and registry as the line abovelow	withdrawn 2025-08-29	Time to revision 10 days
Wed 27 Aug 2025· 1 change
2025-08-27published 2022-05-20	Advisory fix version moved	GHSA-hp87-p4gw-j4gqCVE-2022-28948	gogopkg.in/yaml.v3 high	stated at publication 3.0.0, now states 3.0.1	Time to revision 13 days
Tue 26 Aug 2025· 1 change
2025-08-26published 2025-08-21	Advisory severity changed	GHSA-xr97-25v7-hc2qCVE-2025-55742	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 5 days
Mon 25 Aug 2025· 1 change
2025-08-25published 2022-01-27	Advisory withdrawn	GHSA-77rm-9x9h-xj3gCVE-2021-22570	whole advisoryhigh	withdrawn 2025-08-25	Time to revision 1,307 days
Fri 22 Aug 2025· 2 changes
2025-08-22published 2025-08-13	Package added to advisory	GHSA-gqp3-2cvr-x8m3CVE-2025-48989	maven high	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Time to revision 9 days
2025-08-22published 2025-08-22	Advisory severity changed	GHSA-74rg-6f92-g6wxCVE-2025-55745	whole advisorylow	stated at publication HIGH, now states LOWNo CVSS vector was stated in the first observed version.	Time to revision 0 days
Thu 21 Aug 2025· 2 changes
2025-08-21published 2025-08-14	Advisory severity changed	GHSA-r4mg-4433-c7g3CVE-2025-24293	whole advisorycritical	stated at publication HIGH, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 8 days
2025-08-21published 2025-08-21	Advisory severity changed	GHSA-8hmm-4crw-vm2cCVE-2025-57755	whole advisoryhigh	stated at publication LOW, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Time to revision 0 days
Wed 20 Aug 2025· 1 change
2025-08-20published 2025-07-14	Advisory severity changed	GHSA-6qjf-g333-pv38CVE-2025-53623	whole advisorycritical	stated at publication HIGH, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 37 days
Thu 14 Aug 2025· 5 changes
2025-08-14published 2021-03-18	Advisory fix version moved	Show all 3 advisories in this change: Advisory fix version moved: 8.1.1 → 8.1.2 in pypiHide the 3 advisories in this change: Advisory fix version moved: 8.1.1 → 8.1.2 in pypi	pypipillow high	stated at publication 8.1.1, now states 8.1.2	Duration unknown
2025-08-14published 2021-03-18	same kind of change as the line above	GHSA-95q3-8gr9-gm8wCVE-2021-27923	same package and registry as the line abovehigh	same change as the line above	Duration unknown
2025-08-14published 2021-03-18	same kind of change as the line above	GHSA-3wvg-mj6g-m9cvCVE-2021-27922	same package and registry as the line abovehigh	same change as the line above	Duration unknown
2025-08-14published 2021-03-18	same kind of change as the line above	GHSA-f4w8-cv6p-x6r5CVE-2021-27921	same package and registry as the line abovehigh	same change as the line above	Duration unknown
2025-08-14published 2022-05-24	Package added to advisory	GHSA-j2h2-cvwh-cr64CVE-2020-14457	go moderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 1,178 days
2025-08-14published 2025-08-12	Package added to advisory	GHSA-m5c7-5gv3-hcpfCVE-2025-43734	maven moderate	not named as affected when the advisory was published, now names com.liferay:com.liferay.frontend.taglib.clay	Time to revision 2 days
Wed 13 Aug 2025· 1 change
2025-08-13published 2025-07-20	Advisory withdrawn	GHSA-mqcp-p2hv-vw6xCVE-2025-54314	whole advisoryhigh	withdrawn 2025-08-13	Time to revision 25 days
Tue 12 Aug 2025· 2 changes
2025-08-12published 2025-07-25	Advisory severity changed	GHSA-75jv-vfxf-3865CVE-2025-55013	whole advisorymoderate	stated at publication CRITICAL, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 18 days
2025-08-12published 2025-08-11	Advisory withdrawn	GHSA-pwq7-2gvj-vg9v	whole advisoryhigh	withdrawn 2025-08-12	Time to revision 1 days
Mon 11 Aug 2025· 7 changes
2025-08-11published 2018-07-26 to 2022-01-06	Package added to advisory	Show all 7 advisories in this change: Package added to advisory: lodash-rails named as affected in rubygemsHide the 7 advisories in this change: Package added to advisory: lodash-rails named as affected in rubygems	rubygems 3 bands	not named as affected when the advisory was published, now names lodash-rails	Duration unknown
2025-08-11published 2019-07-19	same kind of change as the line above	GHSA-x5rq-j2xg-h7qmCVE-2019-1010266	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-08-11published 2019-07-10	same kind of change as the line above	GHSA-jf85-cpcp-j695CVE-2019-10744	same package registry as the line abovecritical	same change as the line above	Duration unknown
2025-08-11published 2019-02-07	same kind of change as the line above	GHSA-4xc9-xhrj-v574CVE-2018-16487	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-08-11published 2018-07-26	same kind of change as the line above	GHSA-fvqr-27wr-82fmCVE-2018-3721	same package registry as the line abovemoderate	same change as the line above	Duration unknown
2025-08-11published 2020-07-15	same kind of change as the line above	GHSA-p6mc-m468-83gwCVE-2020-8203	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-08-11published 2021-05-06	same kind of change as the line above	GHSA-35jh-r3h4-6jhmCVE-2021-23337	same package registry as the line abovehigh	same change as the line above	Duration unknown
2025-08-11published 2022-01-06	same kind of change as the line above	GHSA-29mw-wpgm-hmr9CVE-2020-28500	same package registry as the line abovemoderate	same change as the line above	Duration unknown
Fri 8 Aug 2025· 2 changes
2025-08-08published 2025-07-28	Package added to advisory	GHSA-4mxg-3p6v-xgq3Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-4mxg-3p6v-xgq3Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-4mxg-3p6v-xgq3	npm critical	not named as affected when the advisory was published, now names @node-saml/passport-saml and 1 more	Time to revision 11 days
2025-08-08published 2025-07-28	same kind of change as the line above	GHSA-4mxg-3p6v-xgq3CVE-2025-54419	same package registry as the line abovecritical	not named as affected when the advisory was published, now names @node-saml/passport-saml	Time to revision 11 days
2025-08-08published 2025-07-28	same kind of change as the line above	GHSA-4mxg-3p6v-xgq3CVE-2025-54419	same package registry as the line abovecritical	not named as affected when the advisory was published, now names passport-saml	Time to revision 11 days
Thu 7 Aug 2025· 2 changes
2025-08-07published 2025-07-27	Advisory severity changed	GHSA-6v92-r5mx-h5fxCVE-2025-5120	whole advisorycritical	stated at publication HIGH, now states CRITICALCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 11 days
2025-08-07published 2025-03-17	Advisory withdrawn	GHSA-3rw8-4xrq-3f7p	whole advisorymoderate	withdrawn 2025-08-07	Time to revision 143 days
Tue 5 Aug 2025· 1 change
2025-08-05published 2025-07-20	Advisory severity changed	GHSA-mqcp-p2hv-vw6xCVE-2025-54314	whole advisoryhigh	stated at publication LOW, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 17 days
Mon 4 Aug 2025· 4 changes
2025-08-04published 2024-09-26 to 2024-10-31	Package added to advisory	Show all 3 advisories in this change: Package added to advisory: github.com/openbao/openbao named as affected in goHide the 3 advisories in this change: Package added to advisory: github.com/openbao/openbao named as affected in go	go high	not named as affected when the advisory was published, now names github.com/openbao/openbao	Time to revision 277 to 312 days
2025-08-04published 2024-10-10	same kind of change as the line above	GHSA-rr8j-7w34-xp5jCVE-2024-9180	same package registry as the line abovehigh	same change as the line above	Time to revision 298 days
2025-08-04published 2024-10-31	same kind of change as the line above	GHSA-g233-2p4r-3q7vCVE-2024-8185	same package registry as the line abovehigh	same change as the line above	Time to revision 277 days
2025-08-04published 2024-09-26	same kind of change as the line above	GHSA-jg74-mwgw-v6x3CVE-2024-7594	same package registry as the line abovehigh	same change as the line above	Time to revision 312 days
2025-08-04published 2025-07-25	Advisory withdrawn	GHSA-cmm8-gw4m-26cwCVE-2025-43712	whole advisorylow	withdrawn 2025-08-04	Time to revision 10 days
Fri 1 Aug 2025· 2 changes
2025-08-01published 2022-10-16 to 2025-07-05	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2025-08-01Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2025-08-01	whole advisory2 bands	withdrawn 2025-08-01	Time to revision 28 to 1,020 days
2025-08-01published 2022-10-16	same kind of change as the line above	GHSA-w596-4wvx-j9j6CVE-2022-42969	same package and registry as the line abovehigh	withdrawn 2025-08-01	Time to revision 1,020 days
2025-08-01published 2025-07-05	same kind of change as the line above	GHSA-rxf6-323f-44fc	same package and registry as the line abovemoderate	withdrawn 2025-08-01	Time to revision 28 days
Wed 30 Jul 2025· 3 changes
2025-07-30published 2025-07-30	Advisory severity changed	GHSA-rrqh-93c8-j966CVE-2025-54572	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 0 days
2025-07-30published 2025-07-10 to 2025-07-18	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2025-07-30Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2025-07-30	whole advisorymoderate	withdrawn 2025-07-30	Time to revision 12 to 20 days
2025-07-30published 2025-07-18	same kind of change as the line above	GHSA-83j7-mhw9-388w	same package and registry as the line abovemoderate	withdrawn 2025-07-30	Time to revision 12 days
2025-07-30published 2025-07-10	same kind of change as the line above	GHSA-gj52-35xm-gxjh	same package and registry as the line abovemoderate	withdrawn 2025-07-30	Time to revision 20 days
Tue 29 Jul 2025· 3 changes
2025-07-29published 2025-06-26	Package added to advisory	GHSA-xh32-cx6c-cp4vCVE-2025-47943	go moderate	not named as affected when the advisory was published, now names gogs.io/gogs	Time to revision 33 days
2025-07-29published 2025-07-25	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2025-07-29Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2025-07-29	whole advisory2 bands	withdrawn 2025-07-29	Time to revision 4 to 5 days
2025-07-29published 2025-07-25	same kind of change as the line above	GHSA-mvw6-62qv-vmqf	same package and registry as the line abovelow	withdrawn 2025-07-29	Time to revision 5 days
2025-07-29published 2025-07-25	same kind of change as the line above	GHSA-49jm-g4m8-x53pCVE-2025-45406	same package and registry as the line abovemoderate	withdrawn 2025-07-29	Time to revision 4 days
Mon 28 Jul 2025· 8 changes
2025-07-28published 2025-07-18	Advisory fix version moved	GHSA-xffm-g5w8-qvg7	npm@eslint/plugin-kit low	stated at publication 0.3.3, now states 0.3.4	Time to revision 10 days
2025-07-28published 2025-05-30	Package added to advisory	GHSA-6j2q-c73v-97c5CVE-2025-41235	maven high	not named as affected when the advisory was published, now names org.springframework.cloud:spring-cloud-gateway-server-mvc	Time to revision 60 days
2025-07-28published 2025-07-18 to 2025-07-25	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → LOWHide the 2 advisories in this change: Advisory severity changed: HIGH → LOW	whole advisorylow	stated at publication HIGH, now states LOWA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 3 to 10 days
2025-07-28published 2025-07-25	same kind of change as the line above	GHSA-cmm8-gw4m-26cwCVE-2025-43712	same package and registry as the line abovelow	same change as the line above	Time to revision 3 days
2025-07-28published 2025-07-18	same kind of change as the line above	GHSA-xffm-g5w8-qvg7	same package and registry as the line abovelow	same change as the line above	Time to revision 10 days
2025-07-28published 2024-01-22	Advisory severity changed	GHSA-r7qv-8r2h-pg27CVE-2024-58266	whole advisorylow	stated at publication HIGH, now states LOWNo CVSS vector was stated in the first observed version.	Time to revision 553 days
2025-07-28published 2024-04-05	Advisory severity changed	GHSA-5gmm-6m36-r7jhCVE-2023-53156	whole advisorymoderate	stated at publication CRITICAL, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 479 days
2025-07-28published 2024-01-24	Advisory severity changed	GHSA-7g9j-g5jg-3vv3CVE-2024-58265	whole advisorylow	stated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.	Time to revision 551 days
2025-07-28published 2023-12-21	Advisory severity changed	GHSA-6ggr-cwv4-g7qgCVE-2023-53157	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 585 days
Fri 25 Jul 2025· 3 changes
2025-07-25published 2024-08-01	Package added to advisory	GHSA-vvpg-55p7-5h8wShow all 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-vvpg-55p7-5h8wHide the 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-vvpg-55p7-5h8w	go low	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server and 2 more	Time to revision 358 days
2025-07-25published 2024-08-01	same kind of change as the line above	GHSA-vvpg-55p7-5h8wCVE-2024-39837	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server	Time to revision 358 days
2025-07-25published 2024-08-01	same kind of change as the line above	GHSA-vvpg-55p7-5h8wCVE-2024-39837	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v5	Time to revision 358 days
2025-07-25published 2024-08-01	same kind of change as the line above	GHSA-vvpg-55p7-5h8wCVE-2024-39837	same package registry as the line abovelow	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server/v6	Time to revision 358 days

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →