Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Mon 6 Jul 2026· 42 changes
2026-07-06	Product added	Show all 4 CVE records in this change: Product added: red hat ai inference server 3.2 named as affected from red hatHide the 4 CVE records in this change: Product added: red hat ai inference server 3.2 named as affected from red hat	red hat	not named as affected at publication, now names red hat ai inference server 3.2	Time to revision 49 to 67 days
2026-07-06	same kind of change as the line above	CVE-2026-33845	same vendor as the line above	same change as the line above	Time to revision 67 days
2026-07-06	same kind of change as the line above	CVE-2026-33846	same vendor as the line above	same change as the line above	Time to revision 63 days
2026-07-06	same kind of change as the line above	CVE-2026-42009	same vendor as the line above	same change as the line above	Time to revision 49 days
2026-07-06	same kind of change as the line above	CVE-2026-42010	same vendor as the line above	same change as the line above	Time to revision 60 days
2026-07-06published 2026-06-18	Package added to advisory	GHSA-jc38-x7x8-2xc8Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-jc38-x7x8-2xc8Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-jc38-x7x8-2xc8	packagist high	not named as affected when the advisory was published, now names web-token/jwt-bundle and 1 more	Time to revision 18 days
2026-07-06published 2026-06-18	same kind of change as the line above	GHSA-jc38-x7x8-2xc8	same package registry as the line abovehigh	not named as affected when the advisory was published, now names web-token/jwt-bundle	Time to revision 18 days
2026-07-06published 2026-06-18	same kind of change as the line above	GHSA-jc38-x7x8-2xc8	same package registry as the line abovehigh	not named as affected when the advisory was published, now names web-token/jwt-experimental	Time to revision 18 days
2026-07-06published 2026-03-19 to 2026-06-26	Package added to advisory	Show all 13 advisories in this change: Package added to advisory: scriban.signed named as affected in nugetHide the 13 advisories in this change: Package added to advisory: scriban.signed named as affected in nuget	nuget 3 bands	not named as affected when the advisory was published, now names scriban.signed	Time to revision 10 to 109 days
2026-07-06published 2026-06-26	same kind of change as the line above	GHSA-6q7j-xr26-3h2c	same package registry as the line abovemoderate	same change as the line above	Time to revision 10 days
2026-07-06published 2026-03-24	same kind of change as the line above	GHSA-xw6w-9jjh-p9cr	same package registry as the line abovemoderate	same change as the line above	Time to revision 104 days
2026-07-06published 2026-03-24	same kind of change as the line above	GHSA-m2p3-hwv5-xpqw	same package registry as the line abovemoderate	same change as the line above	Time to revision 104 days
2026-07-06published 2026-03-24	same kind of change as the line above	GHSA-xcx6-vp38-8hr5	same package registry as the line abovehigh	same change as the line above	Time to revision 104 days
2026-07-06published 2026-03-24	same kind of change as the line above	GHSA-v66j-x4hw-fv9g	same package registry as the line abovehigh	same change as the line above	Time to revision 104 days
2026-07-06published 2026-03-24	same kind of change as the line above	GHSA-5wr9-m6jw-xx44	same package registry as the line abovecritical	same change as the line above	Time to revision 104 days
2026-07-06published 2026-03-24	same kind of change as the line above	GHSA-x6m9-38vm-2xhf	same package registry as the line abovehigh	same change as the line above	Time to revision 104 days
2026-07-06published 2026-03-24	same kind of change as the line above	GHSA-p6q4-fgr8-vx4p	same package registry as the line abovehigh	same change as the line above	Time to revision 104 days
5 more rows in this change are not listed here. Open all 13 rows →
2026-07-06published 2026-04-22	Advisory withdrawn	Show all 23 advisories in this change: Advisory withdrawn: withdrawn 2026-07-06Hide the 23 advisories in this change: Advisory withdrawn: withdrawn 2026-07-06	whole advisory3 bands	withdrawn 2026-07-06	Time to revision 75 to 75 days
2026-07-06published 2026-04-22	same kind of change as the line above	GHSA-532v-xp3f-837c	same package and registry as the line abovelow	withdrawn 2026-07-06	Time to revision 75 days
2026-07-06published 2026-04-22	same kind of change as the line above	GHSA-79rc-qpw3-jv92	same package and registry as the line abovelow	withdrawn 2026-07-06	Time to revision 75 days
2026-07-06published 2026-04-22	same kind of change as the line above	GHSA-w8m4-4v35-v6x3	same package and registry as the line abovehigh	withdrawn 2026-07-06	Time to revision 75 days
2026-07-06published 2026-04-22	same kind of change as the line above	GHSA-7259-cwhx-3xx3	same package and registry as the line abovemoderate	withdrawn 2026-07-06	Time to revision 75 days
2026-07-06published 2026-04-22	same kind of change as the line above	GHSA-ggc5-46rg-mr4v	same package and registry as the line abovelow	withdrawn 2026-07-06	Time to revision 75 days
2026-07-06published 2026-04-22	same kind of change as the line above	GHSA-66fx-fqv6-5wwx	same package and registry as the line abovemoderate	withdrawn 2026-07-06	Time to revision 75 days
2026-07-06published 2026-04-22	same kind of change as the line above	GHSA-67hp-f6hq-2h6g	same package and registry as the line abovemoderate	withdrawn 2026-07-06	Time to revision 75 days
2026-07-06published 2026-04-22	same kind of change as the line above	GHSA-vchc-9ggh-3236	same package and registry as the line abovemoderate	withdrawn 2026-07-06	Time to revision 75 days
15 more rows in this change are not listed here. Open all 23 rows →
Sun 5 Jul 2026· 1 change
2026-07-05	Product added	CVE-2026-8657	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:jsondiffpatch	Time to revision 50 days
Sat 4 Jul 2026· 1 change
2026-07-04	Product added	CVE-2024-21488	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:network	Time to revision 886 days
Fri 3 Jul 2026· 62 changes
2026-07-03	Product added	CVE-2026-9673	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:json-2-csv	Time to revision 37 days
2026-07-03	Product added	Show all 4 CVE records in this change: Product added: 2 products named as affected from red hatHide the 4 CVE records in this change: Product added: 2 products named as affected from red hat8 rows, one per record and product	red hat	not named as affected at publication, now names red hat ai inference server and 1 more	Time to revision 14 days
2026-07-03	same kind of change as the line above	CVE-2026-56208	same vendor as the line above	not named as affected at publication, now names red hat ai inference server	Time to revision 14 days
2026-07-03	same kind of change as the line above	CVE-2026-56208	same vendor as the line above	not named as affected at publication, now names red hat openshift ai (rhoai)	Time to revision 14 days
2026-07-03	same kind of change as the line above	CVE-2026-56209	same vendor as the line above	not named as affected at publication, now names red hat ai inference server	Time to revision 14 days
2026-07-03	same kind of change as the line above	CVE-2026-56209	same vendor as the line above	not named as affected at publication, now names red hat openshift ai (rhoai)	Time to revision 14 days
2026-07-03	same kind of change as the line above	CVE-2026-56210	same vendor as the line above	not named as affected at publication, now names red hat ai inference server	Time to revision 14 days
2026-07-03	same kind of change as the line above	CVE-2026-56210	same vendor as the line above	not named as affected at publication, now names red hat openshift ai (rhoai)	Time to revision 14 days
2026-07-03	same kind of change as the line above	CVE-2026-56211	same vendor as the line above	not named as affected at publication, now names red hat ai inference server	Time to revision 14 days
2026-07-03	same kind of change as the line above	CVE-2026-56211	same vendor as the line above	not named as affected at publication, now names red hat openshift ai (rhoai)	Time to revision 14 days
2026-07-03	Product added	CVE-2026-35159Show all 51 products in this change: Product added: 51 products named as affected in CVE-2026-35159Hide the 51 products in this change: Product added: 51 products named as affected in CVE-2026-35159	dell	not named as affected at publication, now names precision 3650 mt and 50 more	Time to revision 0 days
2026-07-03	same kind of change as the line above	CVE-2026-35159	same vendor as the line above	not named as affected at publication, now names precision 3650 mt	Time to revision 0 days
2026-07-03	same kind of change as the line above	CVE-2026-35159	same vendor as the line above	not named as affected at publication, now names precision 3660	Time to revision 0 days
2026-07-03	same kind of change as the line above	CVE-2026-35159	same vendor as the line above	not named as affected at publication, now names precision 3680 tower	Time to revision 0 days
2026-07-03	same kind of change as the line above	CVE-2026-35159	same vendor as the line above	not named as affected at publication, now names precision 5470	Time to revision 0 days
2026-07-03	same kind of change as the line above	CVE-2026-35159	same vendor as the line above	not named as affected at publication, now names precision 5480	Time to revision 0 days
2026-07-03	same kind of change as the line above	CVE-2026-35159	same vendor as the line above	not named as affected at publication, now names precision 5490	Time to revision 0 days
2026-07-03	same kind of change as the line above	CVE-2026-35159	same vendor as the line above	not named as affected at publication, now names precision 5560	Time to revision 0 days
2026-07-03	same kind of change as the line above	CVE-2026-35159	same vendor as the line above	not named as affected at publication, now names precision 5570	Time to revision 0 days
43 more rows in this change are not listed here. Open all 51 rows →
2026-07-03	Product added	CVE-2026-12823	browserbase VulDB	not named as affected at publication, now names skills	Time to revision 11 days
2026-07-03	Record state changed	CVE-2026-11577	whole record redhat	stated at publication PUBLISHED, now states REJECTED	Time to revision 25 days
Thu 2 Jul 2026· 18 changes
2026-07-022 commits	Product added	Show all 7 CVE records in this change: Product added: 3 products named as affected from red hatHide the 7 CVE records in this change: Product added: 3 products named as affected from red hat10 rows, one per record and product	red hat	not named as affected at publication, now names red hat openshift container platform 4.19 and 2 moreBranches and original-value intervals are stated on each row.	Time to revision 0 to 36 days
2026-07-02	same kind of change as the line above	CVE-2026-1933	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.19	Time to revision 36 days
2026-07-02	same kind of change as the line above	CVE-2026-2340	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.19	Time to revision 36 days
2026-07-02	same kind of change as the line above	CVE-2026-3012	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.19	Time to revision 36 days
2026-07-02	same kind of change as the line above	CVE-2026-4408	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.19	Time to revision 36 days
2026-07-02	same kind of change as the line above	CVE-2026-5135	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.17 for rhel 9	Time to revision 0 days
2026-07-02	same kind of change as the line above	CVE-2026-5135	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.19 for rhel 9	Time to revision 0 days
2026-07-02	same kind of change as the line above	CVE-2026-5138	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.17 for rhel 9	Time to revision 0 days
2026-07-02	same kind of change as the line above	CVE-2026-5138	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.19 for rhel 9	Time to revision 0 days
2 more rows in this change are not listed here. Open all 10 rows →
2026-07-02	CVSS base score changed	CVE-2026-56004	whole record suse	stated at publication 8.8, now states 10.0CVSS v3.1 · base scoreHighCritical	Time to revision 0 days
2026-07-02	CVSS base score changed	CVE-2026-44832	whole record GitHub_M	stated at publication 7.1, now states 8.7CVSS v4.0 · base scoreHighHigh	Time to revision 37 days
2026-07-02	CVSS base score changed	CVE-2026-56371	whole record VulnCheck	stated at publication 0.0, now states 6.9CVSS v4.0 · base scoreNoneMedium	Time to revision 9 days
2026-07-02	CVSS base score changed	CVE-2026-56379	whole record VulnCheck	stated at publication 0.0, now states 9.2CVSS v4.0 · base scoreNoneCritical	Time to revision 9 days
2026-07-02published 2026-06-19	Advisory fix version moved	GHSA-h3m5-97jq-qjrfCVE-2026-57168	mavenio.openremote:openremote-manager critical	stated at publication 1.24.2, now states 1.25.0	Time to revision 13 days
2026-07-02published 2026-04-29	Advisory severity changed	GHSA-5843-p793-ghmmCVE-2026-22740	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 64 days
2026-07-02published 2026-05-27	Advisory severity changed	GHSA-6439-2f28-8p8qCVE-2026-45075	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 36 days
2026-07-02published 2026-03-18	Advisory withdrawn	GHSA-wmxr-6j5f-838p	whole advisoryhigh	withdrawn 2026-07-02	Time to revision 107 days
Wed 1 Jul 2026· 24 changes
2026-07-01	Added to CISA KEV	CVE-2026-45659	MicrosoftSharePoint Server CISA KEV	fix due 2026-07-04	Duration unknown
2026-07-01	Fix version moved	CVE-2026-13006	qos.ch sarllogback-core NCSC.ch	stated at publication 1.5.35, now states 1.5.37Release branch starts at 1.5.35.Original value first replaced 2026-06-24; this value first seen 2026-07-01.same day	Time to revision 0 days
2026-07-01	Affected range extended	CVE-2026-56024	saad iqbalwp easypay Patchstack	stated at publication 4.4.0, now states 4.5.0Release branch starts at 0.	Time to revision 13 days
2026-07-014 commits	Product added	Show all 6 CVE records in this change: Product added: 7 products named as affected from red hatHide the 6 CVE records in this change: Product added: 7 products named as affected from red hat16 rows, one per record and product	red hat	not named as affected at publication, now names red hat satellite 6.17 for rhel 9 and 6 moreBranches and original-value intervals are stated on each row.	Time to revision 0 to 400 days
2026-07-01	same kind of change as the line above	CVE-2026-5136	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.17 for rhel 9	Time to revision 0 days
2026-07-01	same kind of change as the line above	CVE-2026-5136	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.19 for rhel 9	Time to revision 0 days
2026-07-01	same kind of change as the line above	CVE-2026-5135	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.16 for rhel 8	Time to revision 0 days
2026-07-01	same kind of change as the line above	CVE-2026-5135	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.16 for rhel 9	Time to revision 0 days
2026-07-01	same kind of change as the line above	CVE-2026-5135	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.18 for rhel 9	Time to revision 0 days
2026-07-01	same kind of change as the line above	CVE-2026-5136	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.16 for rhel 8	Time to revision 0 days
2026-07-01	same kind of change as the line above	CVE-2026-5136	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.16 for rhel 9	Time to revision 0 days
2026-07-01	same kind of change as the line above	CVE-2026-5136	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.18 for rhel 9	Time to revision 0 days
8 more rows in this change are not listed here. Open all 16 rows →
2026-07-01published 2024-11-07 to 2025-08-13	Package added to advisory	Show all 3 advisories in this change: Package added to advisory: org.apache.tomcat.embed:tomcat-embed-core named as affected in mavenHide the 3 advisories in this change: Package added to advisory: org.apache.tomcat.embed:tomcat-embed-core named as affected in maven	maven 2 bands	not named as affected when the advisory was published, now names org.apache.tomcat.embed:tomcat-embed-core	Time to revision 322 to 601 days
2026-07-01published 2024-11-07	same kind of change as the line above	GHSA-7jqf-v358-p8g7CVE-2024-38286	same package registry as the line abovehigh	same change as the line above	Time to revision 601 days
2026-07-01published 2025-08-13	same kind of change as the line above	GHSA-23hv-mwm6-g8jfCVE-2025-55668	same package registry as the line abovemoderate	same change as the line above	Time to revision 322 days
2026-07-01published 2025-07-10	same kind of change as the line above	GHSA-4j3c-42xv-3f84CVE-2025-52434	same package registry as the line abovemoderate	same change as the line above	Time to revision 356 days
2026-07-01published 2024-11-07 to 2025-07-10	Package added to advisory	Show all 2 advisories in this change: Package added to advisory: org.apache.tomcat:tomcat-coyote named as affected in mavenHide the 2 advisories in this change: Package added to advisory: org.apache.tomcat:tomcat-coyote named as affected in maven	maven 2 bands	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyote	Time to revision 356 to 601 days
2026-07-01published 2024-11-07	same kind of change as the line above	GHSA-7jqf-v358-p8g7CVE-2024-38286	same package registry as the line abovehigh	same change as the line above	Time to revision 601 days
2026-07-01published 2025-07-10	same kind of change as the line above	GHSA-4j3c-42xv-3f84CVE-2025-52434	same package registry as the line abovemoderate	same change as the line above	Time to revision 356 days
Tue 30 Jun 2026· 35 changes
2026-06-304 commits	Product added	Show all 14 CVE records in this change: Product added: 8 products named as affected from red hatHide the 14 CVE records in this change: Product added: 8 products named as affected from red hat18 rows, one per record and product	red hat	not named as affected at publication, now names red hat openshift container platform 4.20 and 7 moreBranches and original-value intervals are stated on each row.	Time to revision 14 to 505 days
2026-06-30	same kind of change as the line above	CVE-2026-4408	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.20	Time to revision 33 days
2026-06-30	same kind of change as the line above	CVE-2026-42009	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.22	Time to revision 43 days
2026-06-30	same kind of change as the line above	CVE-2026-4408	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.21	Time to revision 33 days
2026-06-30	same kind of change as the line above	CVE-2024-12133	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 505 days
2026-06-30	same kind of change as the line above	CVE-2024-12133	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 extended update support long-life add-on	Time to revision 505 days
2026-06-30	same kind of change as the line above	CVE-2025-12543	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.1 eus for rhel 7	Time to revision 174 days
2026-06-30	same kind of change as the line above	CVE-2025-12543	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.3 eus for rhel 7	Time to revision 174 days
2026-06-30	same kind of change as the line above	CVE-2025-23368	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.3 eus for rhel 7	Time to revision 483 days
10 more rows in this change are not listed here. Open all 18 rows →
2026-06-30	Product added	Show all 7 CVE records in this change: Product added: glib named as affected from gnomeHide the 7 CVE records in this change: Product added: glib named as affected from gnome	gnome redhat	not named as affected at publication, now names glib	Time to revision 0 days
2026-06-30	same kind of change as the line above	CVE-2026-58010	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-06-30	same kind of change as the line above	CVE-2026-58011	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-06-30	same kind of change as the line above	CVE-2026-58012	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-06-30	same kind of change as the line above	CVE-2026-58013	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-06-30	same kind of change as the line above	CVE-2026-58014	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-06-30	same kind of change as the line above	CVE-2026-58015	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-06-30	same kind of change as the line above	CVE-2026-58016	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-06-30	Product added	CVE-2026-54371	attr project VulnCheck	not named as affected at publication, now names attr	Time to revision 1 days
2026-06-30	CVSS base score changed	CVE-2026-12539	whole record Docker	stated at publication 5.7, now states 5.1CVSS v4.0 · base scoreMediumMedium	Time to revision 12 days
2026-06-30	CVSS base score changed	Show all 2 CVE records in this change: CVSS base score changed: 5.1 → 1.2Hide the 2 CVE records in this change: CVSS base score changed: 5.1 → 1.2	whole record qnap	stated at publication 5.1, now states 1.2CVSS v4.0 · base scoreMediumLow	Time to revision 20 days
2026-06-30	same kind of change as the line above	CVE-2026-24716	same vendor as the line above	same change as the line above	Time to revision 20 days
2026-06-30	same kind of change as the line above	CVE-2026-24717	same vendor as the line above	same change as the line above	Time to revision 20 days
2026-06-30	CVSS base score changed	CVE-2026-24719	whole record qnap	stated at publication 8.6, now states 6.1CVSS v4.0 · base scoreHighMedium	Time to revision 20 days
2026-06-30	CVSS base score changed	CVE-2026-41539	whole record qnap	stated at publication 8.7, now states 6.3CVSS v4.0 · base scoreHighMedium	Time to revision 21 days
2026-06-30	Record state changed	CVE-2024-57049	whole record mitre	stated at publication PUBLISHED, now states REJECTED	Time to revision 498 days
2026-06-30	Record state changed	CVE-2026-28678	whole record GitHub_M	stated at publication PUBLISHED, now states REJECTED	Time to revision 115 days
2026-06-30published 2024-01-12	Advisory severity changed	GHSA-8qw9-gf7w-42x5	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 900 days
2026-06-30published 2026-05-26	Advisory withdrawn	GHSA-76v6-f83q-pxvh	whole advisoryhigh	withdrawn 2026-06-30	Time to revision 35 days
Mon 29 Jun 2026· 35 changes
2026-06-29	Added to CISA KEV	CVE-2026-48558	SimpleHelp SimpleHelp CISA KEV	fix due 2026-07-02	Duration unknown
2026-06-29	Ransomware use confirmed	CVE-2026-33825	MicrosoftDefender CISA KEV	stated at publication Unknown, now states Known	Time to revision 68 days
2026-06-29	Fix version moved	CVE-2026-2587	eclipse foundationeclipse glassfish eclipse	stated at publication 7.1.0, now states 7.1.1Release branch starts at 0.Original value first replaced 2026-05-20; this value first seen 2026-06-29.same day	Time to revision 1 days
2026-06-295 commits	Product added	Show all 14 CVE records in this change: Product added: 6 products named as affected from red hatHide the 14 CVE records in this change: Product added: 6 products named as affected from red hat24 rows, one per record and product	red hat	not named as affected at publication, now names red hat discovery 2 and 5 moreBranches and original-value intervals are stated on each row.	Time to revision 13 to 504 days
2026-06-29	same kind of change as the line above	CVE-2025-10911	same vendor as the line above	not named as affected at publication, now names red hat discovery 2	Time to revision 277 days
2026-06-29	same kind of change as the line above	CVE-2025-14831	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 140 days
2026-06-29	same kind of change as the line above	CVE-2026-33846	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 57 days
2026-06-29	same kind of change as the line above	CVE-2026-42009	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 42 days
2026-06-29	same kind of change as the line above	CVE-2026-42010	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 53 days
2026-06-29	same kind of change as the line above	CVE-2026-33845	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 60 days
2026-06-29	same kind of change as the line above	CVE-2024-12133	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 504 days
2026-06-29	same kind of change as the line above	CVE-2024-12133	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 extended update support long-life add-on	Time to revision 504 days
16 more rows in this change are not listed here. Open all 24 rows →
2026-06-29	Product added	CVE-2024-21490	vendor not named snyk	not named as affected at publication, now names angularjs	Time to revision 871 days
2026-06-29	Product added	CVE-2026-6951	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:simple-git	Time to revision 66 days
2026-06-29	Record state changed	Show all 2 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 2 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record mitre	stated at publication PUBLISHED, now states REJECTED	Time to revision 194 to 435 days
2026-06-29	same kind of change as the line above	CVE-2025-29446	same vendor as the line above	same change as the line above	Time to revision 435 days
2026-06-29	same kind of change as the line above	CVE-2025-63391	same vendor as the line above	same change as the line above	Time to revision 194 days
2026-06-29	Record state changed	CVE-2026-22069	whole record OPPO	stated at publication PUBLISHED, now states REJECTED	Time to revision 41 days
2026-06-29published 2026-02-17	Package added to advisory	GHSA-qq5r-98hh-rxc9CVE-2026-24733	maven low	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyote	Time to revision 132 days
2026-06-29published 2026-05-19	Package added to advisory	GHSA-24c8-4792-22hx	nuget high	not named as affected when the advisory was published, now names scriban.signed	Time to revision 41 days
2026-06-29published 2019-10-11	Package added to advisory	GHSA-p979-4mfw-53vgCVE-2019-16869	maven high	not named as affected when the advisory was published, now names io.netty:netty	Duration unknown
Fri 26 Jun 2026· 7 changes
2026-06-26	Product added	CVE-2026-4600	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:jsrsasign	Time to revision 96 days
2026-06-26	Product added	CVE-2025-10911Show all 2 products in this change: Product added: 2 products named as affected in CVE-2025-10911Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2025-10911	red hat	not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update service and 1 more	Time to revision 274 days
2026-06-26	same kind of change as the line above	CVE-2025-10911	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update service	Time to revision 274 days
2026-06-26	same kind of change as the line above	CVE-2025-10911	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.8 update services for sap solutions	Time to revision 274 days
2026-06-26	Product added	CVE-2026-4874	red hat	not named as affected at publication, now names red hat build of keycloak 26.4	Time to revision 92 days
2026-06-26	CVSS base score changed	CVE-2026-10097	whole record wolfSSL	stated at publication 6.3, now states 8.3CVSS v4.0 · base scoreMediumHigh	Time to revision 1 days
2026-06-26published 2026-05-29	Package added to advisory	GHSA-6x26-5727-rrm9CVE-2026-47268	go moderate	not named as affected when the advisory was published, now names github.com/naiba/nezha	Time to revision 28 days
2026-06-26published 2026-06-10	Package added to advisory	GHSA-8h84-fhqq-q58vCVE-2026-48025	go moderate	not named as affected when the advisory was published, now names github.com/forgekeep/nebula-mesh	Time to revision 16 days
Thu 25 Jun 2026· 21 changes
2026-06-25	Added to CISA KEV	CVE-2026-12569	PTCWindchill and FlexPLM CISA KEV	fix due 2026-06-28	Duration unknown
2026-06-25	Added to CISA KEV	CVE-2026-20230	CiscoUnified Communications Manager CISA KEV	fix due 2026-06-28	Duration unknown
2026-06-25	Fix version moved	CVE-2026-33813	golang.org/x/imagegolang.org/x/image/webp Go	stated at publication 0.39.0, now states 0.42.0Release branch starts at 0.	Time to revision 65 days
2026-06-25	Product added	Show all 3 CVE records in this change: Product added: red hat ai inference server 3.3 named as affected from red hatHide the 3 CVE records in this change: Product added: red hat ai inference server 3.3 named as affected from red hat	red hat	not named as affected at publication, now names red hat ai inference server 3.3	Time to revision 24 to 93 days
2026-06-25	same kind of change as the line above	CVE-2026-10118	same vendor as the line above	same change as the line above	Time to revision 24 days
2026-06-25	same kind of change as the line above	CVE-2026-4775	same vendor as the line above	same change as the line above	Time to revision 93 days
2026-06-25	same kind of change as the line above	CVE-2026-4878	same vendor as the line above	same change as the line above	Time to revision 77 days
2026-06-254 commits	Product added	CVE-2025-10911Show all 6 products in this change: Product added: 6 products named as affected in CVE-2025-10911Hide the 6 products in this change: Product added: 6 products named as affected in CVE-2025-10911	red hat	not named as affected at publication, now names red hat enterprise linux 9.6 extended update support and 5 moreBranches and original-value intervals are stated on each row.	Time to revision 273 days
2026-06-25	same kind of change as the line above	CVE-2025-10911	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9.6 extended update support	Time to revision 273 days
2026-06-25	same kind of change as the line above	CVE-2025-10911	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 273 days
2026-06-25	same kind of change as the line above	CVE-2025-10911	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 extended update support long-life add-on	Time to revision 273 days
2026-06-25	same kind of change as the line above	CVE-2025-10911	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9.2 update services for sap solutions	Time to revision 273 days
2026-06-25	same kind of change as the line above	CVE-2025-10911	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9.4 update services for sap solutions	Time to revision 273 days
2026-06-25	same kind of change as the line above	CVE-2025-10911	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 10.0 extended update support	Time to revision 273 days
2026-06-25	Product added	CVE-2026-56115	garybowers VulnCheck	not named as affected at publication, now names bootimus	Time to revision 2 days
2026-06-25	Product added	Show all 3 CVE records in this change: Product added: org.webjars.npm:jsrsasign named as affectedHide the 3 CVE records in this change: Product added: org.webjars.npm:jsrsasign named as affected	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:jsrsasign	Time to revision 94 days
2026-06-25	same kind of change as the line above	CVE-2026-4598	same vendor as the line above	same change as the line above	Time to revision 94 days
2026-06-25	same kind of change as the line above	CVE-2026-4599	same vendor as the line above	same change as the line above	Time to revision 94 days
2026-06-25	same kind of change as the line above	CVE-2026-4602	same vendor as the line above	same change as the line above	Time to revision 94 days
2026-06-25	Product added	CVE-2026-4878	red hat	not named as affected at publication, now names red hat openshift container platform 4.13	Time to revision 77 days
2026-06-25	CVSS base score changed	CVE-2026-13201	whole record redhat	stated at publication 5.2, now states 7.3CVSS v3.1 · base scoreMediumHigh	Time to revision 1 days
2026-06-25	CVSS base score changed	CVE-2025-64308	whole record icscert	stated at publication 8.7, now states 7.1CVSS v4.0 · base scoreHighHigh	Time to revision 223 days
2026-06-25	CVSS base score changed	CVE-2025-64309	whole record icscert	stated at publication 8.6, now states 7.4CVSS v3.1 · base scoreHighHigh	Time to revision 223 days
2026-06-25	CVSS base score changed	CVE-2026-43510	whole record cisa-cg	stated at publication 7.6, now states 5.9CVSS v3.1 · base scoreHighMedium	Time to revision 49 days
Wed 24 Jun 2026· 18 changes
2026-06-24	Product added	Show all 16 CVE records in this change: Product added: red hat discovery 2 named as affected from red hatHide the 16 CVE records in this change: Product added: red hat discovery 2 named as affected from red hat	red hat	not named as affected at publication, now names red hat discovery 2	Time to revision 9 to 526 days
2026-06-24	same kind of change as the line above	CVE-2024-12086	same vendor as the line above	same change as the line above	Time to revision 526 days
2026-06-24	same kind of change as the line above	CVE-2025-14087	same vendor as the line above	same change as the line above	Time to revision 196 days
2026-06-24	same kind of change as the line above	CVE-2025-14512	same vendor as the line above	same change as the line above	Time to revision 195 days
2026-06-24	same kind of change as the line above	CVE-2026-33845	same vendor as the line above	same change as the line above	Time to revision 55 days
2026-06-24	same kind of change as the line above	CVE-2026-33846	same vendor as the line above	same change as the line above	Time to revision 51 days
2026-06-24	same kind of change as the line above	CVE-2026-3832	same vendor as the line above	same change as the line above	Time to revision 55 days
2026-06-24	same kind of change as the line above	CVE-2026-3833	same vendor as the line above	same change as the line above	Time to revision 55 days
2026-06-24	same kind of change as the line above	CVE-2026-42009	same vendor as the line above	same change as the line above	Time to revision 37 days
8 more rows in this change are not listed here. Open all 16 rows →
2026-06-24	Product added	CVE-2026-56274	flowise VulnCheck	not named as affected at publication, now names flowise components	Time to revision 1 days
2026-06-24	CVSS base score changed	CVE-2025-11226	whole record NCSC.ch	stated at publication 5.9, now states 7.0CVSS v4.0 · base scoreMediumHigh	Time to revision 266 days
Tue 23 Jun 2026· 30 changes
2026-06-23	Added to CISA KEV	CVE-2025-67038	LantronixEDS5000 CISA KEV	fix due 2026-06-26	Duration unknown
2026-06-23	Added to CISA KEV	Show all 3 CVE records in this change: Added to CISA KEV: UniFi OS from UbiquitiHide the 3 CVE records in this change: Added to CISA KEV: UniFi OS from Ubiquiti	UbiquitiUniFi OS	fix due 2026-06-26	Duration unknown
2026-06-23	same kind of change as the line above	CVE-2026-34910	same vendor as the line above	same change as the line above	Duration unknown
2026-06-23	same kind of change as the line above	CVE-2026-34909	same vendor as the line above	same change as the line above	Duration unknown
2026-06-23	same kind of change as the line above	CVE-2026-34908	same vendor as the line above	same change as the line above	Duration unknown
2026-06-23	Fix version moved	CVE-2026-56784	openremoteopenremote VulnCheck	stated at publication 1.24.2, now states 1.25.0Release branch starts at 0.same day	Time to revision 0 days
2026-06-23	Fix version moved	CVE-2026-41715	springreactor netty vmware	stated at publication 1.3.6, now states 1.3.15.1Release branch starts at 1.3.0.	Time to revision 15 days
2026-06-23	Affected range extended	CVE-2025-25250	fortinetfortios	stated at publication 7.2.11, now states 7.2.13Release branch starts at 7.2.0.	Time to revision 378 days
2026-06-23	Affected range extended	CVE-2025-25250	fortinetfortios	stated at publication 7.0.17, now states 7.0.19Release branch starts at 7.0.0.	Time to revision 378 days
2026-06-23	Affected range extended	CVE-2025-54821	fortinetfortios	stated at publication 7.2.12, now states 7.2.13Release branch starts at 7.2.0.	Time to revision 217 days
2026-06-23	Affected range extended	CVE-2025-54821	fortinetfortios	stated at publication 7.4.9, now states 7.4.11Release branch starts at 7.4.0.	Time to revision 217 days
2026-06-23	Affected range extended	CVE-2025-54821	fortinetfortios	stated at publication 7.0.18, now states 7.0.19Release branch starts at 7.0.0.	Time to revision 217 days
2026-06-23	Product added	CVE-2026-45170	cyberark software, a palo alto networks company palo_alto	not named as affected at publication, now names vendor pam	Time to revision 12 days
2026-06-23	Product added	CVE-2026-49494	xcitium VulnCheck	not named as affected at publication, now names xcitium client security (xcs)	Time to revision 16 days
2026-06-23	Product added	Show all 2 CVE records in this change: Product added: fortisase named as affected from fortinetHide the 2 CVE records in this change: Product added: fortisase named as affected from fortinet	fortinet	not named as affected at publication, now names fortisase	Time to revision 217 to 378 days
2026-06-23	same kind of change as the line above	CVE-2025-25250	same vendor as the line above	same change as the line above	Time to revision 378 days
2026-06-23	same kind of change as the line above	CVE-2025-54821	same vendor as the line above	same change as the line above	Time to revision 217 days
2026-06-23	Product added	Show all 5 CVE records in this change: Product added: red hat enterprise linux 8.6 advanced mission critical update support named as affected from red hatHide the 5 CVE records in this change: Product added: red hat enterprise linux 8.6 advanced mission critical update support named as affected from red hat	red hat	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 26 to 28 days
2026-06-23	same kind of change as the line above	CVE-2026-1933	same vendor as the line above	same change as the line above	Time to revision 27 days
2026-06-23	same kind of change as the line above	CVE-2026-2340	same vendor as the line above	same change as the line above	Time to revision 27 days
2026-06-23	same kind of change as the line above	CVE-2026-3012	same vendor as the line above	same change as the line above	Time to revision 27 days
2026-06-23	same kind of change as the line above	CVE-2026-4408	same vendor as the line above	same change as the line above	Time to revision 26 days
2026-06-23	same kind of change as the line above	CVE-2026-4480	same vendor as the line above	same change as the line above	Time to revision 28 days
2026-06-23	Product added	Show all 2 CVE records in this change: Product added: red hat enterprise linux 8.4 advanced mission critical update support named as affected from red hatHide the 2 CVE records in this change: Product added: red hat enterprise linux 8.4 advanced mission critical update support named as affected from red hat	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 26 to 28 days
2026-06-23	same kind of change as the line above	CVE-2026-4408	same vendor as the line above	same change as the line above	Time to revision 26 days
2026-06-23	same kind of change as the line above	CVE-2026-4480	same vendor as the line above	same change as the line above	Time to revision 28 days
2026-06-23	CVSS base score changed	CVE-2026-12164	whole record Fortra	stated at publication 4.9, now states 4.4CVSS v3.1 · base scoreMediumMedium	Time to revision 0 days
2026-06-23	CVSS base score changed	CVE-2026-47907	whole record adobe	stated at publication 8.2, now states 8.6CVSS v3.1 · base scoreHighHigh	Time to revision 14 days
2026-06-23	CVSS base score changed	CVE-2026-47937	whole record adobe	stated at publication 7.4, now states 7.7CVSS v3.1 · base scoreHighHigh	Time to revision 14 days
2026-06-23	CVSS base score changed	CVE-2025-64898	whole record adobe	stated at publication 4.3, now states 5.3CVSS v3.1 · base scoreMediumMedium	Time to revision 196 days
2026-06-23	CVSS base score changed	CVE-2026-34694	whole record adobe	stated at publication 5.9, now states 4.8CVSS v3.1 · base scoreMediumMedium	Time to revision 14 days
2026-06-23	CVSS base score changed	CVE-2026-12628	whole record ibm	stated at publication 8.1, now states 9.1CVSS v3.1 · base scoreHighCritical	Time to revision 1 days
2026-06-23	CVSS base score changed	CVE-2026-56104	whole record VulnCheck	stated at publication 9.1, now states 8.8CVSS v4.0 · base scoreCriticalHigh	Time to revision 1 days
2026-06-23	Record state changed	CVE-2026-56120	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Time to revision 0 days
Mon 22 Jun 2026· 21 changes
2026-06-22	Affected range extended	Show all 4 CVE records in this change: Affected range extended: 1.4.5 → 1.4.8 from rustdesk-clientHide the 4 CVE records in this change: Affected range extended: 1.4.5 → 1.4.8 from rustdesk-client	rustdesk-clientrustdesk client VULSec	stated at publication 1.4.5, now states 1.4.8Release branch starts at 0.	Time to revision 109 days
2026-06-22	same kind of change as the line above	CVE-2026-30792	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 109 days
2026-06-22	same kind of change as the line above	CVE-2026-30798	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 109 days
2026-06-22	same kind of change as the line above	CVE-2026-30789	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 109 days
2026-06-22	same kind of change as the line above	CVE-2026-30783	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 109 days
2026-06-226 commits	Product added	Show all 4 CVE records in this change: Product added: 8 products named as affected from red hatHide the 4 CVE records in this change: Product added: 8 products named as affected from red hat9 rows, one per record and product	red hat	not named as affected at publication, now names cost management 4 and 7 moreBranches and original-value intervals are stated on each row.	Time to revision 21 to 88 days
2026-06-22	same kind of change as the line above	CVE-2026-2100	same vendor as the line above	not named as affected at publication, now names cost management 4	Time to revision 88 days
2026-06-22	same kind of change as the line above	CVE-2026-4878	same vendor as the line above	not named as affected at publication, now names cost management 4	Time to revision 74 days
2026-06-22	same kind of change as the line above	CVE-2026-9804	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.18	Time to revision 26 days
2026-06-22	same kind of change as the line above	CVE-2026-9804	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.21	Time to revision 26 days
2026-06-22	same kind of change as the line above	CVE-2026-9804	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.17	Time to revision 25 days
2026-06-22	same kind of change as the line above	CVE-2026-9804	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.20	Time to revision 25 days
2026-06-22	same kind of change as the line above	CVE-2026-9804	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.19	Time to revision 25 days
2026-06-22	same kind of change as the line above	CVE-2026-10118	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 21 days
1 more row in this change is not listed here. Open all 9 rows →
2026-06-22	Product added	CVE-2026-30796	rustdesk-client VULSec	not named as affected at publication, now names rustdesk client	Time to revision 109 days
2026-06-22	CVSS base score changed	CVE-2026-30789	whole record VULSec	stated at publication 9.3, now states 5.7CVSS v4.0 · base scoreCriticalMedium	Time to revision 109 days
2026-06-22	CVSS base score changed	CVE-2026-30783	whole record VULSec	stated at publication 8.8, now states 4.8CVSS v4.0 · base scoreHighMedium	Time to revision 109 days
2026-06-22	CVSS base score changed	CVE-2026-30792	whole record VULSec	stated at publication 9.1, now states 8.3CVSS v4.0 · base scoreCriticalHigh	Time to revision 109 days
2026-06-22	CVSS base score changed	CVE-2026-30796	whole record VULSec	stated at publication 8.7, now states 6.9CVSS v4.0 · base scoreHighMedium	Time to revision 109 days
2026-06-222 commits	Record state changed	Show all 3 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 3 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record VULSec	stated at publication PUBLISHED, now states REJECTEDBranches and original-value intervals are stated on each row.	Time to revision 109 days
2026-06-22	same kind of change as the line above	CVE-2026-30790	same vendor as the line above	same change as the line above	Time to revision 109 days
2026-06-22	same kind of change as the line above	CVE-2026-30794	same vendor as the line above	same change as the line above	Time to revision 109 days
2026-06-22	same kind of change as the line above	CVE-2026-30784	same vendor as the line above	same change as the line above	Time to revision 109 days
Fri 19 Jun 2026· 1 change
2026-06-19	Fix version moved	CVE-2026-43064	linuxlinux	stated at publication 6.1.168, now states 6.1.176Release branch starts at 6.1.*.Original value first replaced 2026-06-01; this value first seen 2026-06-19.	Time to revision 27 days

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →