Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Mon 26 Sep 2022· 2 changes
2022-09-26published 2021-09-02	Package added to advisory	GHSA-9j49-mfvp-vmhmCVE-2021-23406	npm high	not named as affected when the advisory was published, now names degenerator	Time to revision 389 days
2022-09-26published 2018-07-26	Package added to advisory	GHSA-cqp5-m4pq-gfgpCVE-2018-3723	npm high	not named as affected when the advisory was published, now names defaults-deep	Time to revision 1,523 days
Fri 23 Sep 2022· 6 changes
2022-09-23published 2022-09-21	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-09-23published 2022-09-21	same kind of change as the line above	GHSA-c9h3-c6qj-hh7qCVE-2022-34917	same package and registry as the line abovehigh	same change as the line above	Time to revision 3 days
2022-09-23published 2022-09-21	same kind of change as the line above	GHSA-rgqx-226f-2xp4CVE-2022-37259	same package and registry as the line abovehigh	same change as the line above	Time to revision 3 days
2022-09-23published 2022-09-21	Advisory severity changed	GHSA-wc4x-qmr2-rj8hCVE-2022-37265	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-09-23published 2022-09-20	Advisory severity changed	GHSA-mcvg-g9wx-v5vxCVE-2022-38545	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 4 days
2022-09-23published 2022-08-06 to 2022-09-02	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2022-09-23Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2022-09-23	whole advisory2 bands	withdrawn 2022-09-23	Time to revision 22 to 49 days
2022-09-23published 2022-08-06	same kind of change as the line above	GHSA-q2gp-gph3-88x9	same package and registry as the line abovehigh	withdrawn 2022-09-23	Time to revision 49 days
2022-09-23published 2022-09-02	same kind of change as the line above	GHSA-w8v7-c7pm-7wfr	same package and registry as the line abovemoderate	withdrawn 2022-09-23	Time to revision 22 days
Thu 22 Sep 2022· 2 changes
2022-09-22published 2022-09-20	Advisory severity changed	GHSA-phjr-8j92-w5v7CVE-2022-2995	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-09-22published 2022-09-16	Advisory severity changed	GHSA-28m8-9j7v-x499CVE-2022-39215	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 6 days
Wed 21 Sep 2022· 7 changes
2022-09-21published 2021-12-09	Advisory severity changed	GHSA-76qm-4f93-fg6fCVE-2015-9545	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 286 days
2022-09-21published 2022-09-16	Advisory severity changed	GHSA-rfj2-q3h3-hm5jCVE-2022-36113	whole advisorylow	stated at publication MODERATE, now states LOWA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 5 days
2022-09-21published 2022-09-17	Advisory severity changed	GHSA-fv22-xp26-mm9wCVE-2022-40153	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 5 days
2022-09-21published 2020-06-05	Advisory severity changed	GHSA-32xf-jwmv-9hf3CVE-2020-5410	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 838 days
2022-09-21published 2020-01-30	Advisory severity changed	GHSA-8f9f-pc5v-9r5hCVE-2020-5232	whole advisoryhigh	stated at publication CRITICAL, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 965 days
2022-09-21published 2022-09-16	Advisory severity changed	GHSA-wqmc-pm8c-2jhcCVE-2022-36017	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 5 days
2022-09-21published 2022-02-10	Advisory severity changed	GHSA-hp5x-rqf7-43vfCVE-2020-5403	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 223 days
Mon 19 Sep 2022· 65 changes
2022-09-19published 2020-09-23	Advisory fix version moved	GHSA-q3vw-4jx3-rrr2	mavendev.personnummer:personnummer low	stated at publication 1.0.1, now states 3.3.0	Time to revision 726 days
2022-09-19published 2022-09-16	Package added to advisory	GHSA-634p-93h9-92vhCVE-2022-39217	github actions moderate	not named as affected when the advisory was published, now names some-natalie/ghas-to-csv	Time to revision 3 days
2022-09-19published 2022-09-15	Advisory severity changed	GHSA-j9fq-vwqv-2fm2CVE-2022-2900	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 5 days
2022-09-19published 2022-04-27 to 2022-09-16	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 4 to 145 days
2022-09-19published 2022-04-27	same kind of change as the line above	GHSA-ch3h-j2vf-95pvCVE-2022-27777	same package and registry as the line abovemoderate	same change as the line above	Time to revision 145 days
2022-09-19published 2022-09-16	same kind of change as the line above	GHSA-pqw5-jmp5-px4vCVE-2022-3224	same package and registry as the line abovemoderate	same change as the line above	Time to revision 4 days
2022-09-19published 2022-09-16	Advisory severity changed	GHSA-7hgc-php5-77qqCVE-2022-36103	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 3 days
2022-09-19published 2022-09-16	Advisory severity changed	GHSA-237r-mx84-7x8cCVE-2022-36436	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-09-19published 2022-09-12 to 2022-09-15	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 5 to 8 days
2022-09-19published 2022-09-15	same kind of change as the line above	GHSA-2gg5-7c4v-6xx2	same package and registry as the line abovehigh	same change as the line above	Time to revision 5 days
2022-09-19published 2022-09-12	same kind of change as the line above	GHSA-p2f7-9cv7-jjf6CVE-2022-26049	same package and registry as the line abovehigh	same change as the line above	Time to revision 8 days
2022-09-19published 2022-09-16	Advisory severity changed	Show all 53 advisories in this change: Advisory severity changed: LOW → MODERATEHide the 53 advisories in this change: Advisory severity changed: LOW → MODERATE	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 3 to 3 days
2022-09-19published 2022-09-16	same kind of change as the line above	GHSA-m6vp-8q9j-whx4CVE-2022-35983	same package and registry as the line abovemoderate	same change as the line above	Time to revision 3 days
2022-09-19published 2022-09-16	same kind of change as the line above	GHSA-p2xf-8hgm-hpw5CVE-2022-35984	same package and registry as the line abovemoderate	same change as the line above	Time to revision 3 days
2022-09-19published 2022-09-16	same kind of change as the line above	GHSA-9942-r22v-78cpCVE-2022-35985	same package and registry as the line abovemoderate	same change as the line above	Time to revision 3 days
2022-09-19published 2022-09-16	same kind of change as the line above	GHSA-wr9v-g9vf-c74vCVE-2022-35986	same package and registry as the line abovemoderate	same change as the line above	Time to revision 3 days
2022-09-19published 2022-09-16	same kind of change as the line above	GHSA-9vqj-64pv-w55cCVE-2022-35988	same package and registry as the line abovemoderate	same change as the line above	Time to revision 3 days
2022-09-19published 2022-09-16	same kind of change as the line above	GHSA-j43h-pgmg-5hjqCVE-2022-35989	same package and registry as the line abovemoderate	same change as the line above	Time to revision 3 days
2022-09-19published 2022-09-16	same kind of change as the line above	GHSA-397c-5g2j-qxpvCVE-2022-35982	same package and registry as the line abovemoderate	same change as the line above	Time to revision 3 days
2022-09-19published 2022-09-16	same kind of change as the line above	GHSA-vxv8-r8q2-63xwCVE-2022-35981	same package and registry as the line abovemoderate	same change as the line above	Time to revision 3 days
45 more rows in this change are not listed here. Open all 53 rows →
2022-09-19published 2022-09-16	Advisory severity changed	GHSA-pxrw-j2fv-hx3hCVE-2022-35937	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-09-19published 2022-09-16	Advisory severity changed	GHSA-74w3-p89x-ffgh	whole advisorylow	stated at publication CRITICAL, now states LOWThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 3 days
2022-09-19published 2022-09-16	Advisory withdrawn	GHSA-74w3-p89x-ffgh	whole advisorylow	withdrawn 2022-09-19	Time to revision 3 days
Fri 16 Sep 2022· 6 changes
2022-09-16published 2022-09-14	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 3 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 days
2022-09-16published 2022-09-14	same kind of change as the line above	GHSA-4wjj-jwc9-2x96CVE-2022-2989	same package and registry as the line abovehigh	same change as the line above	Time to revision 3 days
2022-09-16published 2022-09-14	same kind of change as the line above	GHSA-fmq7-gh8v-mjvcCVE-2022-1278	same package and registry as the line abovehigh	same change as the line above	Time to revision 3 days
2022-09-16published 2022-09-14	same kind of change as the line above	GHSA-fjm8-m7m6-2fjpCVE-2022-2990	same package and registry as the line abovehigh	same change as the line above	Time to revision 3 days
2022-09-16published 2022-09-12 to 2022-09-13	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 2 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 4 to 5 days
2022-09-16published 2022-09-13	same kind of change as the line above	GHSA-wxx5-w9jc-48wxCVE-2022-37767	same package and registry as the line abovecritical	same change as the line above	Time to revision 4 days
2022-09-16published 2022-09-12	same kind of change as the line above	GHSA-fj2m-w3wv-x9prCVE-2022-39135	same package and registry as the line abovecritical	same change as the line above	Time to revision 5 days
2022-09-16published 2022-09-10	Advisory severity changed	GHSA-9vm3-r8gq-cr6xCVE-2022-38638	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 7 days
Thu 15 Sep 2022· 2 changes
2022-09-15published 2022-09-07	Package added to advisory	GHSA-jj62-mc3m-j769CVE-2020-21516	packagist critical	not named as affected when the advisory was published, now names feehi/cms	Time to revision 9 days
2022-09-15published 2022-09-15	Advisory severity changed	GHSA-m77f-652q-wwp4CVE-2022-3212	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 1 days
Wed 14 Sep 2022· 1 change
2022-09-14published 2021-01-04	Advisory severity changed	GHSA-4w2v-q235-vp99CVE-2020-28168	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 618 days
Sun 11 Sep 2022· 3 changes
2022-09-11published 2021-08-25	Package added to advisory	GHSA-69fv-gw6g-8ccgCVE-2018-20998	pypi critical	not named as affected when the advisory was published, now names arrayfire	Time to revision 381 days
2022-09-11published 2022-09-01	Advisory severity changed	GHSA-qf7j-25g9-r63fCVE-2022-36058	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 9 days
2022-09-11published 2022-08-31	Advisory severity changed	GHSA-jhjh-776m-4765CVE-2022-31152	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 10 days
Fri 9 Sep 2022· 3 changes
2022-09-09published 2021-05-07	Advisory fix version moved	GHSA-cgc7-mwp4-3ccxCVE-2020-15930	npmjoplin moderate	stated at publication 1.0.246, now states 1.1.7	Time to revision 490 days
2022-09-09published 2020-09-11	Advisory fix version moved	GHSA-p82g-2xpp-m5r3CVE-2015-5654	npmdojo moderate	stated at publication 1.2.0, now states 1.9.1	Time to revision 728 days
2022-09-09published 2021-05-17	Package added to advisory	GHSA-jqh7-w5pr-cr56CVE-2020-8176	npm moderate	not named as affected when the advisory was published, now names @shopify/koa-shopify-auth	Time to revision 480 days
Thu 8 Sep 2022· 6 changes
2022-09-08published 2022-04-27 to 2022-08-26	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 3 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 14 to 134 days
2022-09-08published 2022-08-26	same kind of change as the line above	GHSA-7527-8855-9cf8CVE-2022-2255	same package and registry as the line abovehigh	same change as the line above	Time to revision 14 days
2022-09-08published 2022-07-15	same kind of change as the line above	GHSA-339q-62wm-c39wCVE-2021-3859	same package and registry as the line abovehigh	same change as the line above	Time to revision 55 days
2022-09-08published 2022-04-27	same kind of change as the line above	GHSA-4pc7-vqv5-5r3vCVE-2021-3827	same package and registry as the line abovehigh	same change as the line above	Time to revision 134 days
2022-09-08published 2022-05-24	Advisory severity changed	GHSA-rhgr-952r-6p8qCVE-2022-29599	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 108 days
2022-09-08published 2021-11-08	Advisory severity changed	GHSA-862g-9h5m-m3qvCVE-2021-3917	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 304 days
2022-09-08published 2020-12-14	Advisory severity changed	GHSA-hfvc-g252-rp4gCVE-2020-7791	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 633 days
Wed 7 Sep 2022· 1 change
2022-09-07published 2021-09-15	Package added to advisory	GHSA-5vp3-v4hc-gx76CVE-2021-41264	npm critical	not named as affected when the advisory was published, now names @openzeppelin/contracts-upgradeable	Time to revision 357 days
Tue 6 Sep 2022· 2 changes
2022-09-06published 2022-05-24	Package added to advisory	GHSA-hxrm-9w7p-39ccCVE-2020-1045	nuget high	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.win-arm64	Time to revision 105 days
2022-09-06published 2022-03-18	Advisory severity changed	GHSA-8v3j-jfg3-v3fvCVE-2021-44908	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 173 days
Fri 2 Sep 2022· 2 changes
2022-09-02published 2022-05-24	Advisory fix version moved	GHSA-xr8f-59pp-rxxhCVE-2019-1302	nugetmicrosoft.aspnetcore.spaservices moderate	stated at publication 2.1.2, now states 2.1.13	Time to revision 101 days
2022-09-02published 2022-05-24	Advisory fix version moved	GHSA-xr8f-59pp-rxxhCVE-2019-1302	nugetmicrosoft.aspnetcore.spaservices moderate	stated at publication 2.2.1, now states 2.2.7	Time to revision 101 days
Thu 1 Sep 2022· 7 changes
2022-09-01published 2021-11-19 to 2022-06-17	Package added to advisory	Show all 6 advisories in this change: Package added to advisory: opcfoundation.netstandard.opc.ua.core named as affected in nugetHide the 6 advisories in this change: Package added to advisory: opcfoundation.netstandard.opc.ua.core named as affected in nuget	nuget 2 bands	not named as affected when the advisory was published, now names opcfoundation.netstandard.opc.ua.core	Time to revision 76 to 286 days
2022-09-01published 2022-06-17	same kind of change as the line above	GHSA-r7pq-3x6p-7jcmCVE-2022-29863	same package registry as the line abovehigh	same change as the line above	Time to revision 76 days
2022-09-01published 2022-06-17	same kind of change as the line above	GHSA-vhfw-v69p-crcwCVE-2022-29864	same package registry as the line abovehigh	same change as the line above	Time to revision 76 days
2022-09-01published 2022-06-17	same kind of change as the line above	GHSA-fvxf-r9fw-49pcCVE-2022-29865	same package registry as the line abovehigh	same change as the line above	Time to revision 76 days
2022-09-01published 2022-06-17	same kind of change as the line above	GHSA-6fp8-cxc9-4fr9CVE-2022-29866	same package registry as the line abovehigh	same change as the line above	Time to revision 76 days
2022-09-01published 2021-11-19	same kind of change as the line above	GHSA-mjww-934m-h4jwCVE-2020-29457	same package registry as the line abovemoderate	same change as the line above	Time to revision 286 days
2022-09-01published 2022-06-17	same kind of change as the line above	GHSA-5q2v-6j86-5h9vCVE-2022-29862	same package registry as the line abovehigh	same change as the line above	Time to revision 76 days
2022-09-01published 2022-08-24	Advisory severity changed	GHSA-mw9h-hcp7-fgc6CVE-2022-33916	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 9 days
Fri 26 Aug 2022· 12 changes
2022-08-26published 2022-05-24	Package added to advisory	GHSA-hxrm-9w7p-39ccShow all 11 packages in this change: Package added to advisory: 11 packages named as affected in GHSA-hxrm-9w7p-39ccHide the 11 packages in this change: Package added to advisory: 11 packages named as affected in GHSA-hxrm-9w7p-39cc	nuget high	not named as affected when the advisory was published, now names microsoft.aspnetcore.app and 10 more	Time to revision 94 days
2022-08-26published 2022-05-24	same kind of change as the line above	GHSA-hxrm-9w7p-39ccCVE-2020-1045	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app	Time to revision 94 days
2022-08-26published 2022-05-24	same kind of change as the line above	GHSA-hxrm-9w7p-39ccCVE-2020-1045	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-arm	Time to revision 94 days
2022-08-26published 2022-05-24	same kind of change as the line above	GHSA-hxrm-9w7p-39ccCVE-2020-1045	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-arm64	Time to revision 94 days
2022-08-26published 2022-05-24	same kind of change as the line above	GHSA-hxrm-9w7p-39ccCVE-2020-1045	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-musl-arm64	Time to revision 94 days
2022-08-26published 2022-05-24	same kind of change as the line above	GHSA-hxrm-9w7p-39ccCVE-2020-1045	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-musl-x64	Time to revision 94 days
2022-08-26published 2022-05-24	same kind of change as the line above	GHSA-hxrm-9w7p-39ccCVE-2020-1045	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.linux-x64	Time to revision 94 days
2022-08-26published 2022-05-24	same kind of change as the line above	GHSA-hxrm-9w7p-39ccCVE-2020-1045	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.osx-x64	Time to revision 94 days
2022-08-26published 2022-05-24	same kind of change as the line above	GHSA-hxrm-9w7p-39ccCVE-2020-1045	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.aspnetcore.app.runtime.win-arm	Time to revision 94 days
3 more rows in this change are not listed here. Open all 11 rows →
2022-08-26published 2022-08-18	Advisory severity changed	GHSA-mjvm-mhgc-q4gpCVE-2022-36008	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 8 days
Tue 23 Aug 2022· 1 change
2022-08-23published 2022-08-10	Advisory fix version moved	GHSA-9jmq-rx5f-8jwqCVE-2021-32862	pypinbconvert moderate	stated at publication 6.3, now states 6.5.1	Time to revision 13 days
Mon 22 Aug 2022· 6 changes
2022-08-22published 2022-08-10	Advisory severity changed	GHSA-9jmq-rx5f-8jwqCVE-2021-32862	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 12 days
2022-08-22published 2021-03-19	Advisory severity changed	GHSA-jgwr-3qm3-26f3CVE-2021-25329	whole advisoryhigh	stated at publication CRITICAL, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 521 days
2022-08-22published 2021-01-21	Advisory severity changed	GHSA-5p3x-r448-pc62CVE-2021-21239	whole advisorymoderate	stated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.	Time to revision 578 days
2022-08-22published 2022-07-26	Advisory severity changed	GHSA-fw3v-x4f2-v673CVE-2022-34749	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 16 days
2022-08-22published 2022-04-09 to 2022-06-08	Advisory withdrawn	Show all 2 advisories in this change: Advisory withdrawn: withdrawn 2022-08-22Hide the 2 advisories in this change: Advisory withdrawn: withdrawn 2022-08-22	whole advisorycritical	withdrawn 2022-08-22	Time to revision 76 to 136 days
2022-08-22published 2022-06-08	same kind of change as the line above	GHSA-vv7q-mfpc-qgm5CVE-2022-31279	same package and registry as the line abovecritical	withdrawn 2022-08-22	Time to revision 76 days
2022-08-22published 2022-04-09	same kind of change as the line above	GHSA-86r3-4gq8-xw8qCVE-2021-43503	same package and registry as the line abovecritical	withdrawn 2022-08-22	Time to revision 136 days
Tue 16 Aug 2022· 1 change
2022-08-16published 2022-07-22	Advisory severity changed	GHSA-mhxj-85r3-2x55CVE-2022-36313	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 26 days
Mon 15 Aug 2022· 6 changes
2022-08-15published 2022-08-06 to 2022-08-11	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 4 to 10 days
2022-08-15published 2022-08-11	same kind of change as the line above	GHSA-33wh-w4m7-c6r8CVE-2022-35956	same package and registry as the line abovemoderate	same change as the line above	Time to revision 4 days
2022-08-15published 2022-08-06	same kind of change as the line above	GHSA-rqmg-hrg4-fm69CVE-2022-37450	same package and registry as the line abovemoderate	same change as the line above	Time to revision 10 days
2022-08-15published 2022-08-10	Advisory severity changed	GHSA-7qqq-gh2f-wq76CVE-2022-25907	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 6 days
2022-08-15published 2021-05-06 to 2021-09-23	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 3 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 326 to 466 days
2022-08-15published 2021-09-23	same kind of change as the line above	GHSA-fpv6-f8jw-rc3rCVE-2021-41088	same package and registry as the line abovehigh	same change as the line above	Time to revision 326 days
2022-08-15published 2021-08-31	same kind of change as the line above	GHSA-2h3h-q99f-3fhcCVE-2021-39134	same package and registry as the line abovehigh	same change as the line above	Time to revision 349 days
2022-08-15published 2021-05-06	same kind of change as the line above	GHSA-46f2-3v63-3xrpCVE-2021-28966	same package and registry as the line abovehigh	same change as the line above	Time to revision 466 days
Fri 12 Aug 2022· 1 change
2022-08-12published 2022-02-09	Package added to advisory	GHSA-jh6m-3pqw-242hCVE-2020-14359	go high	not named as affected when the advisory was published, now names github.com/keycloak/keycloak-gatekeeper	Time to revision 185 days
Thu 11 Aug 2022· 15 changes
2022-08-11published 2022-07-15 to 2022-07-26	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 16 to 27 days
2022-08-11published 2022-07-15	same kind of change as the line above	GHSA-44vr-rwwj-p88hCVE-2022-31180	same package and registry as the line abovecritical	same change as the line above	Time to revision 27 days
2022-08-11published 2022-07-26	same kind of change as the line above	GHSA-ww2v-frv5-pj5xCVE-2022-35131	same package and registry as the line abovecritical	same change as the line above	Time to revision 16 days
2022-08-11published 2022-07-15	Advisory severity changed	GHSA-jjc5-fp7p-6f8wCVE-2022-31179	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 27 days
2022-08-11published 2022-01-06	Advisory severity changed	GHSA-pccr-q7v9-5f27CVE-2021-44548	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 217 days
2022-08-11published 2021-12-16	Advisory severity changed	GHSA-cxg7-84wp-8pcqCVE-2021-4117	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 238 days
2022-08-11published 2021-01-29	Advisory severity changed	GHSA-hgmg-hhc8-g5wrCVE-2021-21254	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 559 days
2022-08-11published 2022-07-19 to 2022-07-29	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 2 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 13 to 22 days
2022-08-11published 2022-07-29	same kind of change as the line above	GHSA-2cpx-6pqp-wf35CVE-2022-31183	same package and registry as the line abovecritical	same change as the line above	Time to revision 13 days
2022-08-11published 2022-07-19	same kind of change as the line above	GHSA-jxvf-m3x5-mxwqCVE-2020-28471	same package and registry as the line abovecritical	same change as the line above	Time to revision 22 days
2022-08-11published 2020-12-21	Advisory severity changed	GHSA-9f66-54xg-pc2cCVE-2020-26275	whole advisorymoderate	stated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.	Time to revision 598 days
2022-08-11published 2022-02-15	Advisory severity changed	GHSA-pf59-j7c2-rh6xCVE-2020-13597	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 178 days
2022-08-11published 2021-04-19	Advisory severity changed	GHSA-wmg4-8cp2-hpg9CVE-2021-29430	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 479 days
2022-08-11published 2022-07-27	Advisory severity changed	GHSA-8274-h5jp-97vrCVE-2022-31109	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 14 days
2022-08-11published 2020-07-07	Advisory severity changed	GHSA-93f3-23rq-pjfpCVE-2020-15095	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 764 days
2022-08-11published 2019-12-13	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: LOW → HIGHHide the 2 advisories in this change: Advisory severity changed: LOW → HIGH	whole advisoryhigh	stated at publication LOW, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 971 days
2022-08-11published 2019-12-13	same kind of change as the line above	GHSA-4328-8hgf-7wjrCVE-2019-16777	same package and registry as the line abovehigh	same change as the line above	Time to revision 971 days
2022-08-11published 2019-12-13	same kind of change as the line above	GHSA-x8qc-rrcw-4r46CVE-2019-16776	same package and registry as the line abovehigh	same change as the line above	Time to revision 971 days
Wed 10 Aug 2022· 8 changes
2022-08-10published 2022-07-19	Package added to advisory	GHSA-4x9r-j582-cgr8CVE-2022-33891	pypi high	not named as affected when the advisory was published, now names pyspark	Time to revision 23 days
2022-08-10published 2022-07-29	Advisory severity changed	GHSA-32ff-4g79-vgfcCVE-2022-31177	whole advisorylow	stated at publication MODERATE, now states LOWNo CVSS vector was stated in the first observed version.	Time to revision 12 days
2022-08-10published 2022-07-23	Advisory severity changed	GHSA-5469-c5p2-xv5gCVE-2022-34113	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 19 days
2022-08-10published 2022-07-23	Advisory severity changed	GHSA-c2pj-rr68-pw94CVE-2022-34112	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 19 days
2022-08-10published 2021-10-12	Advisory severity changed	GHSA-qv95-g3gm-x542CVE-2021-41802	whole advisorylow	stated at publication MODERATE, now states LOWThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 302 days
2022-08-10published 2021-09-29	Advisory severity changed	GHSA-x55w-vjjp-222rCVE-2021-3820	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 315 days
2022-08-10published 2021-09-13	Advisory severity changed	GHSA-cqqh-49mx-fq63CVE-2021-3645	whole advisorycritical	stated at publication MODERATE, now states CRITICALCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 331 days
2022-08-10published 2022-07-20	Advisory severity changed	GHSA-99j7-mhfh-w84pCVE-2022-31162	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 22 days
Fri 5 Aug 2022· 2 changes
2022-08-05published 2022-05-24	Package added to advisory	GHSA-cjw4-2w9r-r8mvCVE-2019-12410	pypi high	not named as affected when the advisory was published, now names pyarrow	Time to revision 73 days
2022-08-05published 2022-07-18	Advisory severity changed	GHSA-4hq8-jgr8-mw9jCVE-2020-7641	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 19 days
Thu 4 Aug 2022· 1 change
2022-08-04published 2022-02-11	Package added to advisory	GHSA-6qq8-5wq3-86rpCVE-2020-15129	go moderate	not named as affected when the advisory was published, now names github.com/containous/traefik/v2/pkg/api	Time to revision 174 days
Wed 3 Aug 2022· 1 change
2022-08-03published 2020-08-31	Advisory fix version moved	GHSA-4mv4-gmmf-q382CVE-2015-6584	npmdatatables high	stated at publication 1.10.8, now states 1.10.10	Time to revision 702 days
Tue 2 Aug 2022· 2 changes
2022-08-02published 2021-05-18	Advisory severity changed	GHSA-58pf-pcwv-qg85CVE-2020-7665	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 441 days
2022-08-02published 2019-12-02	Advisory severity changed	GHSA-6xc2-mj39-q599CVE-2019-18818	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 974 days
Fri 29 Jul 2022· 8 changes
2022-07-29published 2022-02-11	Package added to advisory	GHSA-6qq8-5wq3-86rpCVE-2020-15129	go moderate	not named as affected when the advisory was published, now names github.com/containous/traefik/v2	Time to revision 168 days
2022-07-29published 2021-04-20	Advisory severity changed	GHSA-6757-jp84-gxfxCVE-2020-1747	whole advisorycritical	stated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.	Time to revision 465 days
2022-07-29published 2022-07-15	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 14 to 14 days
2022-07-29published 2022-07-15	same kind of change as the line above	GHSA-rpxg-hg79-h8q9CVE-2022-35628	same package and registry as the line abovecritical	same change as the line above	Time to revision 14 days
2022-07-29published 2022-07-15	same kind of change as the line above	GHSA-j3h2-8mf8-j5r2CVE-2015-8031	same package and registry as the line abovecritical	same change as the line above	Time to revision 14 days
2022-07-29published 2022-07-14	Advisory severity changed	GHSA-6w2f-6wq3-rjvfCVE-2022-32065	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 16 days
2022-07-29published 2020-11-24	Advisory severity changed	GHSA-vfrc-7r7c-w9mxCVE-2020-26237	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 612 days
2022-07-29published 2019-10-15	Advisory severity changed	GHSA-c427-hjc3-wrfwCVE-2019-17495	whole advisorycritical	stated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.	Time to revision 1,018 days
2022-07-29published 2022-07-23	Advisory severity changed	GHSA-m7gr-5w5g-36jfCVE-2022-34037	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 7 days
Tue 26 Jul 2022· 1 change
2022-07-26published 2022-05-14	Package added to advisory	GHSA-2xjx-v99w-gqf3CVE-2019-0545	nuget high	not named as affected when the advisory was published, now names microsoft.netcore.app	Time to revision 74 days
Fri 22 Jul 2022· 3 changes
2022-07-22published 2022-07-14 to 2022-07-16	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 7 to 9 days
2022-07-22published 2022-07-16	same kind of change as the line above	GHSA-4wf5-vphf-c2xcCVE-2022-25858	same package and registry as the line abovehigh	same change as the line above	Time to revision 7 days
2022-07-22published 2022-07-14	same kind of change as the line above	GHSA-227g-7cvv-6ff3CVE-2022-31781	same package and registry as the line abovehigh	same change as the line above	Time to revision 9 days
2022-07-22published 2022-07-17	Advisory severity changed	GHSA-fr75-x856-q6j8CVE-2021-36711	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 6 days
Thu 21 Jul 2022· 2 changes
2022-07-21published 2022-04-26	Advisory severity changed	GHSA-75p6-52g3-rqc8CVE-2022-1245	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 86 days
2022-07-21published 2022-06-16	Advisory withdrawn	GHSA-cqpr-pcm7-m3jc	whole advisorymoderate	withdrawn 2022-07-21	Time to revision 35 days

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →