Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Thu 1 Dec 2022· 1 change
2022-12-01published 2022-11-26	Advisory severity changed	GHSA-83g7-8fch-p37mCVE-2022-45908	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 6 days
Wed 30 Nov 2022· 2 changes
2022-11-30published 2022-11-23	Advisory severity changed	GHSA-22wj-vf5f-wrvjCVE-2022-45868	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 7 days
2022-11-30published 2022-11-24	Advisory severity changed	GHSA-gr58-76rp-mmg4CVE-2022-2650	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 6 days
Tue 29 Nov 2022· 2 changes
2022-11-29published 2022-02-10	Advisory severity changed	GHSA-34wx-x2w9-vqm3CVE-2022-0538	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Duration unknown
2022-11-29published 2022-11-22	Advisory severity changed	GHSA-rmf2-pwfq-h75jCVE-2022-40189	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 7 days
Mon 28 Nov 2022· 3 changes
2022-11-28published 2022-11-22	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 6 to 6 days
2022-11-28published 2022-11-22	same kind of change as the line above	GHSA-cm43-f2pv-6v68CVE-2022-41131	same package and registry as the line abovehigh	same change as the line above	Time to revision 6 days
2022-11-28published 2022-11-22	same kind of change as the line above	GHSA-rp7f-fhm8-9hpfCVE-2022-33012	same package and registry as the line abovehigh	same change as the line above	Time to revision 6 days
2022-11-28published 2022-11-21	Advisory severity changed	GHSA-r7qp-cfhv-p84wCVE-2022-41940	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 7 days
Sat 26 Nov 2022· 3 changes
2022-11-26published 2022-11-23	Advisory severity changed	GHSA-wqg7-mx6p-2rw3CVE-2022-45462	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-11-26published 2022-11-22	Advisory severity changed	GHSA-g56w-cwg4-hxx9CVE-2022-4116	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-11-26published 2022-11-19	Advisory severity changed	GHSA-3xg8-cc8f-9wv2CVE-2022-4064	whole advisorylow	stated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.	Time to revision 7 days
Fri 25 Nov 2022· 1 change
2022-11-25published 2022-01-19	Package added to advisory	GHSA-f7vh-qwp3-x37mCVE-2022-23307	maven critical	not named as affected when the advisory was published, now names log4j:log4j	Duration unknown
Wed 23 Nov 2022· 5 changes
2022-11-23published 2022-11-21	Advisory severity changed	GHSA-hf94-8mx5-2vvjCVE-2022-4105	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 2 days
2022-11-23published 2022-11-21	Advisory severity changed	GHSA-4wfh-48v4-3r84CVE-2022-45470	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-11-23published 2022-08-27	Advisory severity changed	GHSA-qpq9-jpv4-6gwrCVE-2021-3632	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Duration unknown
2022-11-23published 2022-11-21	Advisory severity changed	GHSA-g8jw-8vpv-pv5qCVE-2022-42096	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-11-23published 2022-11-21	Advisory severity changed	GHSA-gjg7-qfvp-9hm4CVE-2022-4093	whole advisorycritical	stated at publication HIGH, now states CRITICALCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 3 days
Tue 22 Nov 2022· 1 change
2022-11-22published 2022-11-22	Advisory severity changed	GHSA-rr8h-f97q-8p9cCVE-2022-38148	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 1 days
Fri 18 Nov 2022· 14 changes
2022-11-18published 2021-05-07	Package added to advisory	Show all 2 advisories in this change: Package added to advisory: org.odata4j:odata4j-dist named as affected in mavenHide the 2 advisories in this change: Package added to advisory: org.odata4j:odata4j-dist named as affected in maven	maven critical	not named as affected when the advisory was published, now names org.odata4j:odata4j-dist	Duration unknown
2022-11-18published 2021-05-07	same kind of change as the line above	GHSA-2382-qx5h-rvqhCVE-2016-11023	same package registry as the line abovecritical	same change as the line above	Duration unknown
2022-11-18published 2021-05-07	same kind of change as the line above	GHSA-f96g-24cg-f24wCVE-2016-11024	same package registry as the line abovecritical	same change as the line above	Duration unknown
2022-11-18published 2021-05-07	Package added to advisory	Show all 2 advisories in this change: Package added to advisory: org.odata4j:odata4j-parent named as affected in mavenHide the 2 advisories in this change: Package added to advisory: org.odata4j:odata4j-parent named as affected in maven	maven critical	not named as affected when the advisory was published, now names org.odata4j:odata4j-parent	Duration unknown
2022-11-18published 2021-05-07	same kind of change as the line above	GHSA-2382-qx5h-rvqhCVE-2016-11023	same package registry as the line abovecritical	same change as the line above	Duration unknown
2022-11-18published 2021-05-07	same kind of change as the line above	GHSA-f96g-24cg-f24wCVE-2016-11024	same package registry as the line abovecritical	same change as the line above	Duration unknown
2022-11-18published 2019-07-05	Package added to advisory	GHSA-7v35-qwwj-p98gCVE-2019-9843	maven high	not named as affected when the advisory was published, now names com.diffplug.spotless:spotless-maven-plugin	Duration unknown
2022-11-18published 2019-06-27	Package added to advisory	GHSA-v33x-prhc-gph5CVE-2019-11272	maven high	not named as affected when the advisory was published, now names org.springframework.security:spring-security-cas	Duration unknown
2022-11-18published 2019-05-29	Package added to advisory	GHSA-h896-mx9x-g32gCVE-2019-0188	maven high	not named as affected when the advisory was published, now names org.apache.camel:camel-xmljson	Duration unknown
2022-11-18published 2018-12-20	Package added to advisory	GHSA-27xw-p8v6-9jjrCVE-2018-15801	maven high	not named as affected when the advisory was published, now names org.springframework.security:spring-security-oauth2-jose	Duration unknown
2022-11-18published 2022-11-14	Advisory severity changed	GHSA-g2qw-6vrr-v6pqCVE-2022-45136	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-11-18published 2022-11-14	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-11-18published 2022-11-14	same kind of change as the line above	GHSA-w8fp-3gwq-gxpwCVE-2022-43693	same package and registry as the line abovehigh	same change as the line above	Time to revision 4 days
2022-11-18published 2022-11-14	same kind of change as the line above	GHSA-q4mp-jvh2-76fjCVE-2022-45199	same package and registry as the line abovehigh	same change as the line above	Duration unknown
2022-11-18published 2021-05-07	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Duration unknown
2022-11-18published 2021-05-07	same kind of change as the line above	GHSA-2382-qx5h-rvqhCVE-2016-11023	same package and registry as the line abovecritical	same change as the line above	Duration unknown
2022-11-18published 2021-05-07	same kind of change as the line above	GHSA-f96g-24cg-f24wCVE-2016-11024	same package and registry as the line abovecritical	same change as the line above	Duration unknown
2022-11-18published 2018-10-16	Advisory severity changed	GHSA-hvpr-9cr6-q5v7CVE-2017-3159	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Duration unknown
Wed 16 Nov 2022· 1 change
2022-11-16published 2022-10-06	Advisory withdrawn	GHSA-mqxp-cjr9-c5jmCVE-2022-40160	whole advisorymoderate	withdrawn 2022-11-16	Time to revision 41 days
Tue 15 Nov 2022· 2 changes
2022-11-15published 2018-12-20	Advisory fix version moved	GHSA-jxm5-5xcw-h57qCVE-2018-1000823	mavenorg.exist-db:exist-core critical	stated at publication 5.0.0, now states 5.1.0	Time to revision 1,426 days
2022-11-15published 2022-11-07	Advisory severity changed	GHSA-2chg-86hq-7w38CVE-2022-44797	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 8 days
Thu 10 Nov 2022· 7 changes
2022-11-10published 2022-11-01	Package added to advisory	GHSA-43xg-8wmj-cw8hCVE-2022-31777	pypi moderate	not named as affected when the advisory was published, now names pyspark	Time to revision 9 days
2022-11-10published 2022-05-24	Package added to advisory	GHSA-8cw2-jv5c-c825CVE-2019-12408	pypi high	not named as affected when the advisory was published, now names pyarrow	Time to revision 170 days
2022-11-10published 2022-11-08	Advisory severity changed	GHSA-8g2p-5pqh-5jmcCVE-2022-41064	whole advisorymoderate	stated at publication CRITICAL, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-11-10published 2022-10-06	Advisory withdrawn	Show all 4 advisories in this change: Advisory withdrawn: withdrawn 2022-11-10Hide the 4 advisories in this change: Advisory withdrawn: withdrawn 2022-11-10	whole advisorymoderate	withdrawn 2022-11-10	Time to revision 35 days
2022-11-10published 2022-10-06	same kind of change as the line above	GHSA-c7mc-q43h-5672CVE-2022-40157	same package and registry as the line abovemoderate	withdrawn 2022-11-10	Time to revision 35 days
2022-11-10published 2022-10-06	same kind of change as the line above	GHSA-mf2h-6mg2-px9xCVE-2022-40158	same package and registry as the line abovemoderate	withdrawn 2022-11-10	Time to revision 35 days
2022-11-10published 2022-10-06	same kind of change as the line above	GHSA-99jc-v8qm-wjvvCVE-2022-40159	same package and registry as the line abovemoderate	withdrawn 2022-11-10	Time to revision 35 days
2022-11-10published 2022-10-06	same kind of change as the line above	GHSA-hw4q-585g-f92xCVE-2022-40161	same package and registry as the line abovemoderate	withdrawn 2022-11-10	Time to revision 35 days
Wed 9 Nov 2022· 1 change
2022-11-09published 2022-11-08	Advisory withdrawn	GHSA-r4jg-5v89-9v62CVE-2022-39390	whole advisoryhigh	withdrawn 2022-11-09	Time to revision 1 days
Tue 8 Nov 2022· 4 changes
2022-11-08published 2022-10-26	Package added to advisory	GHSA-g6hg-4v3c-6jq7CVE-2022-43766	pypi high	not named as affected when the advisory was published, now names apache-iotdb	Time to revision 13 days
2022-11-08published 2022-11-07	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 1 to 1 days
2022-11-08published 2022-11-07	same kind of change as the line above	GHSA-94rr-4jr5-9h2pCVE-2022-37865	same package and registry as the line abovecritical	same change as the line above	Time to revision 1 days
2022-11-08published 2022-11-07	same kind of change as the line above	GHSA-97xg-phpr-rg8qCVE-2022-42920	same package and registry as the line abovecritical	same change as the line above	Time to revision 1 days
2022-11-08published 2022-10-11	Advisory withdrawn	GHSA-9pgh-qqpf-7wqjCVE-2022-37616	whole advisorycritical	withdrawn 2022-11-08	Time to revision 28 days
Mon 7 Nov 2022· 1 change
2022-11-07published 2021-12-14	Advisory severity changed	GHSA-9c22-pwxw-p6hxCVE-2022-39384	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 328 days
Sun 6 Nov 2022· 2 changes
2022-11-06published 2022-11-04	Advisory severity changed	GHSA-7fxj-fr3v-r9gjCVE-2022-3023	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 1 days
2022-11-06published 2022-11-04	Advisory severity changed	GHSA-h95w-p3x6-wwj6CVE-2022-3721	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 1 days
Thu 3 Nov 2022· 1 change
2022-11-03published 2017-10-24	Advisory severity changed	GHSA-hpcf-8vf9-q4gjCVE-2016-7103	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 1,836 days
Wed 2 Nov 2022· 4 changes
2022-11-02published 2022-11-01	Advisory severity changed	GHSA-43xg-8wmj-cw8hCVE-2022-31777	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 1 days
2022-11-02published 2022-11-01	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 1 to 1 days
2022-11-02published 2022-11-01	same kind of change as the line above	GHSA-8rwr-x37p-mx23CVE-2022-3602	same package and registry as the line abovecritical	same change as the line above	Time to revision 1 days
2022-11-02published 2022-11-01	same kind of change as the line above	GHSA-mmmh-wcxm-2wr4CVE-2022-31692	same package and registry as the line abovecritical	same change as the line above	Time to revision 1 days
2022-11-02published 2022-11-01	Advisory severity changed	GHSA-p22x-g9px-3945CVE-2022-42252	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 1 days
Tue 1 Nov 2022· 145 changes
2022-11-01published 2022-05-24 to 2022-08-30	Package added to advisory	Show all 6 advisories in this change: Package added to advisory: 129 packages named as affected in nugetHide the 6 advisories in this change: Package added to advisory: 129 packages named as affected in nuget137 rows, one per advisory and package	nuget 2 bands	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.osx-arm64 and 128 more	Time to revision 63 to 161 days
2022-11-01published 2022-08-30	same kind of change as the line above	GHSA-3rq8-h3gj-r5c6CVE-2022-29117	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.osx-arm64	Time to revision 63 days
2022-11-01published 2022-05-24	same kind of change as the line above	GHSA-242j-2gm6-5rwxCVE-2021-1723	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-musl-arm	Time to revision 161 days
2022-11-01published 2022-05-24	same kind of change as the line above	GHSA-5v8v-66v8-mwm7CVE-2020-8927	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names microsoft.netcore.app.runtime.aot.linux-x64.cross.android-arm	Time to revision 161 days
2022-11-01published 2022-05-24	same kind of change as the line above	GHSA-5v8v-66v8-mwm7CVE-2020-8927	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names microsoft.netcore.app.runtime.aot.linux-x64.cross.android-arm64	Time to revision 161 days
2022-11-01published 2022-05-24	same kind of change as the line above	GHSA-5v8v-66v8-mwm7CVE-2020-8927	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names microsoft.netcore.app.runtime.aot.linux-x64.cross.android-x64	Time to revision 161 days
2022-11-01published 2022-05-24	same kind of change as the line above	GHSA-5v8v-66v8-mwm7CVE-2020-8927	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names microsoft.netcore.app.runtime.aot.linux-x64.cross.android-x86	Time to revision 161 days
2022-11-01published 2022-05-24	same kind of change as the line above	GHSA-5v8v-66v8-mwm7CVE-2020-8927	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names microsoft.netcore.app.runtime.aot.linux-x64.cross.browser-wasm	Time to revision 161 days
2022-11-01published 2022-05-24	same kind of change as the line above	GHSA-5v8v-66v8-mwm7CVE-2020-8927	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names microsoft.netcore.app.runtime.aot.osx-x64.cross.android-arm	Time to revision 161 days
129 more rows in this change are not listed here. Open all 137 rows →
2022-11-01published 2022-10-26 to 2022-10-27	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 2 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 5 to 6 days
2022-11-01published 2022-10-27	same kind of change as the line above	GHSA-jw36-mrvg-j5fxCVE-2022-3363	same package and registry as the line abovecritical	same change as the line above	Time to revision 5 days
2022-11-01published 2022-10-26	same kind of change as the line above	GHSA-9w4g-fp9h-3q2vCVE-2022-42468	same package and registry as the line abovecritical	same change as the line above	Time to revision 6 days
2022-11-01published 2022-10-25 to 2022-10-26	Advisory severity changed	Show all 4 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 4 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 6 to 7 days
2022-11-01published 2022-10-26	same kind of change as the line above	GHSA-g6hg-4v3c-6jq7CVE-2022-43766	same package and registry as the line abovehigh	same change as the line above	Time to revision 6 days
2022-11-01published 2022-10-26	same kind of change as the line above	GHSA-3f3w-gmqf-4hj3CVE-2022-39944	same package and registry as the line abovehigh	same change as the line above	Time to revision 6 days
2022-11-01published 2022-10-25	same kind of change as the line above	GHSA-r29w-r9ph-vm76CVE-2022-41704	same package and registry as the line abovehigh	same change as the line above	Time to revision 7 days
2022-11-01published 2022-10-25	same kind of change as the line above	GHSA-rwqr-m72q-v6cmCVE-2022-42890	same package and registry as the line abovehigh	same change as the line above	Time to revision 7 days
2022-11-01published 2022-10-26	Advisory severity changed	GHSA-fwvc-9xhj-26v5CVE-2022-41711	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 6 days
2022-11-01published 2022-10-25	Advisory severity changed	GHSA-cr84-xvw4-qx3cCVE-2022-25918	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 7 days
Fri 28 Oct 2022· 1 change
2022-10-28published 2019-01-14	Advisory severity changed	GHSA-mc23-976p-j42xCVE-2019-0542	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 1,383 days
Thu 27 Oct 2022· 3 changes
2022-10-27published 2022-10-25	Advisory severity changed	GHSA-7gc4-r5jr-9hxvCVE-2022-39345	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-10-27published 2022-10-25	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-10-27published 2022-10-25	same kind of change as the line above	GHSA-vj4m-83m8-xpw5CVE-2022-39341	same package and registry as the line abovemoderate	same change as the line above	Time to revision 2 days
2022-10-27published 2022-10-25	same kind of change as the line above	GHSA-f4mm-2r69-mg5fCVE-2022-39342	same package and registry as the line abovemoderate	same change as the line above	Time to revision 2 days
Wed 26 Oct 2022· 1 change
2022-10-26published 2022-09-23	Advisory severity changed	GHSA-8gq9-2x98-w8hfCVE-2022-1941	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 33 days
Tue 25 Oct 2022· 11 changes
2022-10-25published 2022-09-17	Package added to advisory	Show all 5 advisories in this change: Package added to advisory: com.fasterxml.woodstox:woodstox-core named as affected in mavenHide the 5 advisories in this change: Package added to advisory: com.fasterxml.woodstox:woodstox-core named as affected in maven	maven 3 bands	not named as affected when the advisory was published, now names com.fasterxml.woodstox:woodstox-core	Time to revision 39 days
2022-10-25published 2022-09-17	same kind of change as the line above	GHSA-3f7h-mf4q-vrm4CVE-2022-40152	same package registry as the line abovemoderate	same change as the line above	Time to revision 39 days
2022-10-25published 2022-09-17	same kind of change as the line above	GHSA-4rv7-wj6m-6c6rCVE-2022-40156	same package registry as the line abovelow	same change as the line above	Time to revision 39 days
2022-10-25published 2022-09-17	same kind of change as the line above	GHSA-5hc5-c3m9-8vcjCVE-2022-40155	same package registry as the line abovelow	same change as the line above	Time to revision 39 days
2022-10-25published 2022-09-17	same kind of change as the line above	GHSA-9fwf-46g9-45rxCVE-2022-40154	same package registry as the line abovelow	same change as the line above	Time to revision 39 days
2022-10-25published 2022-09-17	same kind of change as the line above	GHSA-fv22-xp26-mm9wCVE-2022-40153	same package registry as the line abovehigh	same change as the line above	Time to revision 39 days
2022-10-25published 2022-10-18 to 2022-10-20	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 5 to 7 days
2022-10-25published 2022-10-20	same kind of change as the line above	GHSA-99j5-fvg3-54pmCVE-2022-3327	same package and registry as the line abovecritical	same change as the line above	Time to revision 5 days
2022-10-25published 2022-10-18	same kind of change as the line above	GHSA-q4qq-jhjv-7rh2CVE-2022-39312	same package and registry as the line abovecritical	same change as the line above	Time to revision 7 days
2022-10-25published 2022-10-19	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 6 days
2022-10-25published 2022-10-19	same kind of change as the line above	GHSA-7fvj-g3wp-29g8CVE-2022-43429	same package and registry as the line abovehigh	same change as the line above	Time to revision 6 days
2022-10-25published 2022-10-19	same kind of change as the line above	GHSA-vhwv-8897-jm7qCVE-2022-43430	same package and registry as the line abovehigh	same change as the line above	Time to revision 6 days
2022-10-25published 2021-08-30	Advisory severity changed	GHSA-mq5p-2mcr-m52jCVE-2021-39160	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 421 days
2022-10-25published 2021-03-11	Advisory severity changed	GHSA-hpv8-9rq5-hq7wCVE-2021-21364	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 594 days
Sat 22 Oct 2022· 5 changes
2022-10-22published 2022-10-20	Advisory severity changed	GHSA-p373-jqfm-j6wrCVE-2022-37298	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-10-22published 2022-10-19	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-10-22published 2022-10-19	same kind of change as the line above	GHSA-f6mq-6fx5-w2chCVE-2022-43403	same package and registry as the line abovecritical	same change as the line above	Time to revision 2 days
2022-10-22published 2022-10-19	same kind of change as the line above	GHSA-mqc2-w9r8-mmxmCVE-2022-43402	same package and registry as the line abovecritical	same change as the line above	Time to revision 2 days
2022-10-22published 2022-10-20	Advisory severity changed	GHSA-7w4x-4h67-pgmvCVE-2022-31684	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-10-22published 2022-10-19	Advisory severity changed	GHSA-g66m-fqxf-3w35CVE-2022-43407	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 2 days
Fri 21 Oct 2022· 2 changes
2022-10-21published 2022-10-19	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-10-21published 2022-10-19	same kind of change as the line above	GHSA-6rj8-9cm9-6gffCVE-2022-3608	same package and registry as the line abovehigh	same change as the line above	Time to revision 2 days
2022-10-21published 2022-10-19	same kind of change as the line above	GHSA-2w2m-ccf8-57cqCVE-2022-43415	same package and registry as the line abovehigh	same change as the line above	Time to revision 2 days
Thu 20 Oct 2022· 3 changes
2022-10-20published 2022-10-19	Advisory severity changed	GHSA-5qwq-g2hx-r6f7CVE-2022-39198	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 1 days
2022-10-20published 2022-10-17	Advisory severity changed	GHSA-p8f7-22gq-m7j9CVE-2022-42975	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-10-20published 2021-02-01	Advisory severity changed	GHSA-j6px-jwvv-vpwqCVE-2021-21277	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 626 days
Wed 19 Oct 2022· 2 changes
2022-10-19published 2022-10-13 to 2022-10-16	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 to 6 days
2022-10-19published 2022-10-16	same kind of change as the line above	GHSA-qrw5-5h28-6cmgCVE-2022-41323	same package and registry as the line abovehigh	same change as the line above	Time to revision 3 days
2022-10-19published 2022-10-13	same kind of change as the line above	GHSA-x4q7-m6fp-4v9vCVE-2022-35944	same package and registry as the line abovehigh	same change as the line above	Time to revision 6 days
Tue 18 Oct 2022· 4 changes
2022-10-18published 2022-10-14	Advisory severity changed	GHSA-x8x2-wc2h-wc48CVE-2022-3439	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-10-18published 2022-10-11	Advisory severity changed	GHSA-9pgh-qqpf-7wqjCVE-2022-37616	whole advisorycritical	stated at publication MODERATE, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 7 days
2022-10-18published 2022-09-17	Advisory severity changed	GHSA-56h3-78gp-v83rCVE-2022-40149	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 32 days
2022-10-18published 2022-10-12	Advisory severity changed	GHSA-7cm4-vmf2-8wf2CVE-2022-40871	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 5 days
Thu 13 Oct 2022· 4 changes
2022-10-13published 2022-10-12	Advisory severity changed	GHSA-7v3g-4878-5qrfCVE-2022-41606	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 1 days
2022-10-13published 2022-10-12	Advisory severity changed	GHSA-45x9-q6vj-cqgqCVE-2022-40664	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 1 days
2022-10-13published 2022-09-30 to 2022-10-11	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 2 to 5 days
2022-10-13published 2022-10-11	same kind of change as the line above	GHSA-4f63-89w9-3jjvCVE-2022-3358	same package and registry as the line abovehigh	same change as the line above	Time to revision 2 days
2022-10-13published 2022-09-30	same kind of change as the line above	GHSA-5c6q-f783-h888	same package and registry as the line abovehigh	same change as the line above	Time to revision 5 days
Wed 12 Oct 2022· 2 changes
2022-10-12published 2019-08-19	Advisory severity changed	GHSA-cr5j-953j-xw5pCVE-2019-5477	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 1,150 days
2022-10-12published 2022-10-06	Advisory severity changed	GHSA-7wr6-fj4x-893vCVE-2022-3376	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 6 days
Tue 11 Oct 2022· 1 change
2022-10-11published 2022-10-06	Advisory severity changed	GHSA-77xx-rxvh-q682CVE-2022-41853	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 5 days
Mon 10 Oct 2022· 6 changes
2022-10-10published 2022-10-06	Advisory severity changed	GHSA-9g3v-v24q-jj5pCVE-2022-3273	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-10-10published 2022-10-07	Advisory severity changed	GHSA-3q8r-f3pj-3gc4CVE-2022-41672	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-10-10published 2022-10-07	Advisory severity changed	GHSA-grv6-m753-3w2gCVE-2022-3423	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-10-10published 2022-10-06	Advisory severity changed	GHSA-wrx5-rp7m-mm49CVE-2022-41852	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-10-10published 2022-10-05	Advisory severity changed	GHSA-67x4-qr35-qvrmCVE-2022-39273	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 5 days
2022-10-10published 2022-01-08	Advisory severity changed	GHSA-f9jg-8p32-2f55CVE-2021-25743	whole advisorylow	stated at publication HIGH, now states LOWNo CVSS vector was stated in the first observed version.	Time to revision 276 days
Fri 7 Oct 2022· 3 changes
2022-10-07published 2020-06-09	Advisory severity changed	GHSA-68q3-7wjp-7q3jCVE-2020-4041	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 851 days
2022-10-07published 2021-01-29	Advisory severity changed	GHSA-cghx-9gcr-r42xCVE-2020-8570	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 616 days
2022-10-07published 2019-10-17	Advisory severity changed	GHSA-2mh8-gx2m-mr75CVE-2019-17359	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 1,086 days
Thu 6 Oct 2022· 4 changes
2022-10-06published 2022-09-30	Package added to advisory	GHSA-f36p-42jv-8rh2	maven high	not named as affected when the advisory was published, now names com.wire.bots:lithium	Time to revision 7 days
2022-10-06published 2022-10-04	Advisory severity changed	GHSA-2w6m-q946-399rCVE-2022-38817	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-10-06published 2022-09-29	Advisory severity changed	GHSA-jx7c-7mj5-9438CVE-2021-43980	whole advisorylow	stated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.	Time to revision 8 days
2022-10-06published 2020-05-21	Advisory severity changed	GHSA-h79p-32mx-fjj9CVE-2020-11973	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 868 days
Tue 4 Oct 2022· 3 changes
2022-10-04published 2021-05-06	Package added to advisory	GHSA-f2jv-r9rf-7988Show all 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-f2jv-r9rf-7988Hide the 3 packages in this change: Package added to advisory: 3 packages named as affected in GHSA-f2jv-r9rf-7988	maven critical	not named as affected when the advisory was published, now names org.webjars.bowergithub.wycats:handlebars.js and 2 more	Time to revision 516 days
2022-10-04published 2021-05-06	same kind of change as the line above	GHSA-f2jv-r9rf-7988CVE-2021-23369	same package registry as the line abovecritical	not named as affected when the advisory was published, now names org.webjars.bowergithub.wycats:handlebars.js	Time to revision 516 days
2022-10-04published 2021-05-06	same kind of change as the line above	GHSA-f2jv-r9rf-7988CVE-2021-23369	same package registry as the line abovecritical	not named as affected when the advisory was published, now names org.webjars.npm:handlebars	Time to revision 516 days
2022-10-04published 2021-05-06	same kind of change as the line above	GHSA-f2jv-r9rf-7988CVE-2021-23369	same package registry as the line abovecritical	not named as affected when the advisory was published, now names org.webjars:handlebars	Time to revision 516 days
Mon 3 Oct 2022· 2 changes
2022-10-03published 2022-09-30	Advisory severity changed	GHSA-r48r-j8fx-mq2cCVE-2022-39251	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-10-03published 2022-09-28	Advisory severity changed	GHSA-4phg-hpqm-c3j4CVE-2022-31367	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 6 days
Fri 30 Sep 2022· 2 changes
2022-09-30published 2021-05-06	Advisory severity changed	GHSA-cf4h-3jhx-xvhqCVE-2021-23358	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 511 days
2022-09-30published 2022-08-18	Advisory withdrawn	GHSA-cvx8-ppmc-78hmCVE-2022-1798	whole advisorymoderate	withdrawn 2022-09-30	Time to revision 42 days
Thu 29 Sep 2022· 1 change
2022-09-29published 2022-09-25	Advisory severity changed	GHSA-q3f4-9h4p-vgr3CVE-2022-41340	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 4 days
Wed 28 Sep 2022· 1 change
2022-09-28published 2022-09-21	Advisory severity changed	GHSA-9jjv-524m-jm98CVE-2022-39239	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 6 days
Tue 27 Sep 2022· 2 changes
2022-09-27published 2022-09-23	Advisory severity changed	GHSA-fvf5-xp83-vrqpCVE-2022-34026	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-09-27published 2022-09-23	Advisory severity changed	GHSA-7cgv-v83v-rr87CVE-2022-40186	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 4 days

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →