Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Fri 27 May 2022· 18 changes
2022-05-27published 2020-05-26	Advisory severity changed	GHSA-m42x-37p3-fv5wCVE-2020-8162	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 731 days
2022-05-27published 2020-05-26	Advisory severity changed	GHSA-2p68-f74v-9wc6CVE-2020-8165	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 731 days
2022-05-27published 2020-09-02	Advisory severity changed	GHSA-pp7h-53gx-mx7rCVE-2020-8244	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 632 days
2022-05-27published 2022-02-15	Advisory severity changed	GHSA-h5rh-w6vm-9ghcCVE-2021-27358	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 102 days
2022-05-27published 2021-02-05 to 2021-05-06	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 386 to 476 days
2022-05-27published 2021-05-06	same kind of change as the line above	GHSA-9m6j-fcg5-2442CVE-2021-27515	same package and registry as the line abovemoderate	same change as the line above	Time to revision 386 days
2022-05-27published 2021-02-05	same kind of change as the line above	GHSA-f4hq-453j-p95fCVE-2021-3189	same package and registry as the line abovemoderate	same change as the line above	Time to revision 476 days
2022-05-27published 2021-03-01	Advisory severity changed	GHSA-p6j9-7xhc-rhwpCVE-2021-27516	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 452 days
2022-05-27published 2021-03-29	Advisory severity changed	GHSA-pq64-v7f5-gqh8CVE-2021-27291	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Time to revision 424 days
2022-05-27published 2021-02-08 to 2021-09-20	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 249 to 473 days
2022-05-27published 2021-02-08	same kind of change as the line above	GHSA-rrqm-p222-8ph2CVE-2021-21304	same package and registry as the line abovehigh	same change as the line above	Time to revision 473 days
2022-05-27published 2021-09-20	same kind of change as the line above	GHSA-44c6-4v22-4mhxCVE-2021-3795	same package and registry as the line abovehigh	same change as the line above	Time to revision 249 days
2022-05-27published 2021-09-20	Advisory severity changed	GHSA-rp65-9cf3-cjxrCVE-2021-3803	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 249 days
2022-05-27published 2021-11-19	Advisory severity changed	GHSA-896r-f27r-55mwCVE-2021-3918	whole advisorycritical	stated at publication MODERATE, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 189 days
2022-05-27published 2021-09-27	Advisory severity changed	GHSA-3c9c-2p65-qvwvCVE-2021-41097	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 242 days
2022-05-27published 2022-04-27 to 2022-05-05	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 3 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 23 to 31 days
2022-05-27published 2022-05-05	same kind of change as the line above	GHSA-6346-5r4h-ff5xCVE-2022-1555	same package and registry as the line abovemoderate	same change as the line above	Time to revision 23 days
2022-05-27published 2022-04-27	same kind of change as the line above	GHSA-f32v-vf79-p29qCVE-2022-1466	same package and registry as the line abovemoderate	same change as the line above	Time to revision 31 days
2022-05-27published 2022-05-03	same kind of change as the line above	GHSA-jmhj-vh4q-hhmqCVE-2022-24902	same package and registry as the line abovemoderate	same change as the line above	Time to revision 25 days
2022-05-27published 2022-04-30	Advisory severity changed	GHSA-9hgc-wpc5-v8p9CVE-2022-1530	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 28 days
2022-05-27published 2022-04-26	Advisory severity changed	GHSA-phwq-j96m-2c2qCVE-2022-29078	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 32 days
Wed 25 May 2022· 2 changes
2022-05-25published 2022-02-10	Advisory fix version moved	GHSA-h236-g5gh-vq6cCVE-2019-19935	npmfroala-editor moderate	stated at publication 3.0.6, now states 3.2.3	Time to revision 104 days
2022-05-25published 2018-10-17	Advisory severity changed	GHSA-4fq3-mr56-cg6rCVE-2018-1273	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 1,316 days
Sun 22 May 2022· 2 changes
2022-05-22published 2022-03-11	Package added to advisory	GHSA-9rr6-jpg7-9jg6CVE-2021-38296	pypi high	not named as affected when the advisory was published, now names pyspark	Time to revision 73 days
2022-05-22published 2022-03-31	Package added to advisory	GHSA-qg5x-66hp-cw5pCVE-2022-25598	pypi high	not named as affected when the advisory was published, now names apache-dolphinscheduler	Time to revision 53 days
Tue 10 May 2022· 2 changes
2022-05-10published 2022-05-03	Advisory severity changed	GHSA-qp49-3pvw-x4m5CVE-2022-29970	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 8 days
2022-05-10published 2022-04-29	Advisory severity changed	GHSA-h8pj-cxx2-jfg2CVE-2021-41945	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 12 days
Thu 5 May 2022· 3 changes
2022-05-05published 2022-04-26	Package added to advisory	GHSA-8wp2-vxpg-xcvpCVE-2022-1457	packagist critical	not named as affected when the advisory was published, now names neorazorx/facturascripts	Time to revision 10 days
2022-05-05published 2021-04-07	Advisory severity changed	GHSA-gfr2-qpxh-qj9mCVE-2020-1735	whole advisorymoderate	stated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.	Time to revision 393 days
2022-05-05published 2022-04-23	Advisory severity changed	GHSA-g9hh-vvx3-v37vCVE-2022-28366	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 13 days
Wed 4 May 2022· 1 change
2022-05-04published 2021-09-20	Advisory severity changed	GHSA-jgrx-mgxx-jf9vCVE-2021-3777	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 225 days
Tue 3 May 2022· 4 changes
2022-05-03published 2022-04-03	Package added to advisory	GHSA-6v73-fgf6-w5j7CVE-2022-22963	maven critical	not named as affected when the advisory was published, now names org.springframework.cloud:spring-cloud-function-context	Time to revision 31 days
2022-05-03published 2021-01-29 to 2021-02-11	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 2 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 445 to 458 days
2022-05-03published 2021-02-11	same kind of change as the line above	GHSA-r3j7-x2g5-9gx6CVE-2021-27185	same package and registry as the line abovecritical	same change as the line above	Time to revision 445 days
2022-05-03published 2021-01-29	same kind of change as the line above	GHSA-6c3f-p5wp-34mhCVE-2021-3190	same package and registry as the line abovecritical	same change as the line above	Time to revision 458 days
2022-05-03published 2021-02-26	Advisory severity changed	GHSA-3rpf-5rqv-689qCVE-2021-26120	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 430 days
Thu 28 Apr 2022· 2 changes
2022-04-28published 2022-04-20	Advisory severity changed	GHSA-fxwj-v664-wv5gCVE-2022-1385	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 9 days
2022-04-28published 2022-03-31	Advisory severity changed	GHSA-8m49-2xj8-67v9CVE-2022-27816	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 6 days
Wed 27 Apr 2022· 2 changes
2022-04-27published 2021-04-13	Advisory fix version moved	GHSA-w8h4-vw8f-rvvjCVE-2021-26276	npmconfig-shield moderate	stated at publication 0.2.2, now states 0.2.3	Time to revision 379 days
2022-04-27published 2021-02-08	Advisory severity changed	GHSA-cf3w-g86h-35x4CVE-2021-21305	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 443 days
Tue 26 Apr 2022· 4 changes
2022-04-26published 2021-09-20	Advisory severity changed	GHSA-93q8-gq69-wqmwCVE-2021-3807	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 218 days
2022-04-26published 2018-08-21	Advisory severity changed	GHSA-cqxw-3p7v-p9grCVE-2016-10345	whole advisoryhigh	stated at publication CRITICAL, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 1,344 days
2022-04-26published 2021-04-20	Advisory severity changed	GHSA-gwr8-5j83-483cCVE-2019-14904	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Time to revision 371 days
2022-04-26published 2022-02-10	Advisory severity changed	GHSA-jrg3-qq99-35g7CVE-2018-21234	whole advisorycritical	stated at publication HIGH, now states CRITICALThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 75 days
Mon 25 Apr 2022· 3 changes
2022-04-25published 2022-04-15	Advisory severity changed	GHSA-g5mm-vmx4-3rg7CVE-2022-22968	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 11 days
2022-04-25published 2021-06-23	Advisory severity changed	GHSA-9qq2-xhmc-h9qrCVE-2018-20321	whole advisorymoderate	stated at publication HIGH, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 306 days
2022-04-25published 2021-05-18	Advisory severity changed	GHSA-xhg2-rvm8-w2jhCVE-2019-13209	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 342 days
Fri 22 Apr 2022· 2 changes
2022-04-22published 2021-03-18 to 2021-04-07	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: LOW → MODERATEHide the 2 advisories in this change: Advisory severity changed: LOW → MODERATE	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 380 to 400 days
2022-04-22published 2021-03-18	same kind of change as the line above	GHSA-hwvv-438r-mhvjCVE-2021-22134	same package and registry as the line abovemoderate	same change as the line above	Time to revision 400 days
2022-04-22published 2021-04-07	same kind of change as the line above	GHSA-244r-fcj3-ghjqCVE-2021-20289	same package and registry as the line abovemoderate	same change as the line above	Time to revision 380 days
Tue 19 Apr 2022· 4 changes
2022-04-19published 2022-04-08	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 2 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 12 to 12 days
2022-04-19published 2022-04-08	same kind of change as the line above	GHSA-r3r5-jhw6-4634CVE-2022-27818	same package and registry as the line abovecritical	same change as the line above	Time to revision 12 days
2022-04-19published 2022-04-08	same kind of change as the line above	GHSA-gx2c-fvhc-ph4jCVE-2022-26612	same package and registry as the line abovecritical	same change as the line above	Time to revision 12 days
2022-04-19published 2022-04-01	Advisory severity changed	GHSA-qvf8-p83w-v58jCVE-2022-27649	whole advisoryhigh	stated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 18 days
2022-04-19published 2022-04-01	Advisory severity changed	GHSA-c3g4-w6cv-6v7hCVE-2022-27651	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 18 days
Mon 18 Apr 2022· 5 changes
2022-04-18published 2022-04-01	Advisory severity changed	GHSA-xw7v-qrhc-jjg2CVE-2021-37517	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 18 days
2022-04-18published 2022-04-01 to 2022-04-03	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 3 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 16 to 17 days
2022-04-18published 2022-04-03	same kind of change as the line above	GHSA-74w3-2r77-fw5hCVE-2022-27177	same package and registry as the line abovecritical	same change as the line above	Time to revision 16 days
2022-04-18published 2022-04-02	same kind of change as the line above	GHSA-45hc-r4fj-qj89CVE-2021-44135	same package and registry as the line abovecritical	same change as the line above	Time to revision 17 days
2022-04-18published 2022-04-01	same kind of change as the line above	GHSA-6635-c626-vj4rCVE-2022-21235	same package and registry as the line abovecritical	same change as the line above	Time to revision 17 days
2022-04-18published 2022-04-07	Advisory severity changed	GHSA-jm35-h8q2-73mpCVE-2021-43177	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 11 days
Sun 17 Apr 2022· 1 change
2022-04-17published 2022-04-09	Advisory severity changed	GHSA-86r3-4gq8-xw8qCVE-2021-43503	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 9 days
Fri 15 Apr 2022· 2 changes
2022-04-15published 2022-04-03	Advisory severity changed	GHSA-hf55-c445-2w97CVE-2022-21830	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 13 days
2022-04-15published 2022-04-04	Advisory severity changed	GHSA-x752-qjv4-c4hcCVE-2022-28368	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 12 days
Tue 12 Apr 2022· 1 change
2022-04-12published 2021-05-28	Package added to advisory	GHSA-g42g-737j-qx6jCVE-2021-25735	go moderate	not named as affected when the advisory was published, now names k8s.io/kubernetes	Time to revision 319 days
Fri 8 Apr 2022· 4 changes
2022-04-08published 2022-02-25	Advisory fix version moved	GHSA-q62h-jw38-24vhCVE-2022-24615	mavennet.lingala.zip4j:zip4j moderate	stated at publication 2.9.0, now states 2.10.0	Time to revision 1 days
2022-04-08published 2021-12-09	Advisory severity changed	GHSA-qjw2-hr98-qgfhCVE-2020-24750	whole advisoryhigh	stated at publication CRITICAL, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 120 days
2022-04-08published 2018-12-20	Advisory severity changed	GHSA-27xw-p8v6-9jjrCVE-2018-15801	whole advisoryhigh	stated at publication CRITICAL, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 1,205 days
2022-04-08published 2022-03-26	Advisory severity changed	GHSA-69p3-xp37-f692CVE-2022-0759	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 14 days
Wed 6 Apr 2022· 3 changes
2022-04-06published 2022-03-31	Advisory severity changed	GHSA-p4jg-pccf-h82cCVE-2022-27815	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 7 days
2022-04-06published 2022-04-04	Advisory severity changed	GHSA-7vrm-3jc8-5wwm	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 2 days
2022-04-06published 2022-04-03	Advisory severity changed	GHSA-6v73-fgf6-w5j7CVE-2022-22963	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 4 days
Tue 5 Apr 2022· 3 changes
2022-04-05published 2021-11-10	Advisory severity changed	GHSA-5mxh-2qfv-4g7jCVE-2021-3910	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 146 days
2022-04-05published 2022-03-31	Advisory severity changed	GHSA-qg5x-66hp-cw5pCVE-2022-25598	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 6 days
2022-04-05published 2022-03-29	Advisory severity changed	GHSA-674v-3g2w-84gxCVE-2021-46433	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 8 days
Mon 4 Apr 2022· 4 changes
2022-04-04published 2021-08-13	Advisory fix version moved	GHSA-4vww-mc66-62m6CVE-2021-33037	mavenorg.apache.tomcat:tomcat moderate	stated at publication 10.0.6, now states 10.0.7	Time to revision 234 days
2022-04-04published 2021-08-13	Advisory fix version moved	GHSA-4vww-mc66-62m6CVE-2021-33037	mavenorg.apache.tomcat:tomcat moderate	stated at publication 8.5.66, now states 8.5.68	Time to revision 234 days
2022-04-04published 2021-08-13	Advisory fix version moved	GHSA-4vww-mc66-62m6CVE-2021-33037	mavenorg.apache.tomcat:tomcat moderate	stated at publication 9.0.46, now states 9.0.48	Time to revision 234 days
2022-04-04published 2022-03-18	Advisory severity changed	GHSA-xvch-5gv4-984hCVE-2021-44906	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 18 days
Fri 1 Apr 2022· 3 changes
2022-04-01published 2022-03-26	Advisory severity changed	GHSA-rr8m-29g8-8cgcCVE-2022-1064	whole advisoryhigh	stated at publication CRITICAL, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 7 days
2022-04-01published 2022-03-26	Advisory severity changed	GHSA-pv39-qp28-4mghCVE-2021-43090	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 7 days
2022-04-01published 2019-10-11	Advisory severity changed	GHSA-p979-4mfw-53vgCVE-2019-16869	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 903 days
Wed 30 Mar 2022· 5 changes
2022-03-30published 2022-03-20 to 2022-03-23	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → CRITICALHide the 2 advisories in this change: Advisory severity changed: MODERATE → CRITICAL	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 8 to 11 days
2022-03-30published 2022-03-23	same kind of change as the line above	GHSA-xr2c-5w89-63pvCVE-2022-26184	same package and registry as the line abovecritical	same change as the line above	Time to revision 8 days
2022-03-30published 2022-03-20	same kind of change as the line above	GHSA-rggc-4g3r-j7ffCVE-2022-26265	same package and registry as the line abovecritical	same change as the line above	Time to revision 11 days
2022-03-30published 2022-03-18 to 2022-03-23	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 8 to 13 days
2022-03-30published 2022-03-23	same kind of change as the line above	GHSA-9m87-6fj3-c5xhCVE-2022-26183	same package and registry as the line abovehigh	same change as the line above	Time to revision 8 days
2022-03-30published 2022-03-18	same kind of change as the line above	GHSA-vrcc-g6vj-mh5wCVE-2021-42219	same package and registry as the line abovehigh	same change as the line above	Time to revision 13 days
2022-03-30published 2022-03-17	Advisory severity changed	GHSA-32j9-6qqm-mq9gCVE-2022-21164	whole advisoryhigh	stated at publication LOW, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 14 days
Tue 29 Mar 2022· 5 changes
2022-03-29published 2022-03-15	Advisory fix version moved	Show all 2 advisories in this change: Advisory fix version moved: 9.0.55141 → 9.0.55143 in packagistHide the 2 advisories in this change: Advisory fix version moved: 9.0.55141 → 9.0.55143 in packagist	packagisttribalsystems/zenario 2 bands	stated at publication 9.0.55141, now states 9.0.55143	Time to revision 15 days
2022-03-29published 2022-03-15	same kind of change as the line above	GHSA-rgg3-3wh7-w935CVE-2021-42171	same package and registry as the line abovecritical	same change as the line above	Time to revision 15 days
2022-03-29published 2022-03-15	same kind of change as the line above	GHSA-x8wj-cqmp-3wmmCVE-2021-41952	same package and registry as the line abovemoderate	same change as the line above	Time to revision 15 days
2022-03-29published 2022-03-18	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 2 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 12 days
2022-03-29published 2022-03-18	same kind of change as the line above	GHSA-x5m8-2r8v-8f97CVE-2022-25352	same package and registry as the line abovecritical	same change as the line above	Time to revision 12 days
2022-03-29published 2022-03-18	same kind of change as the line above	GHSA-6956-83fg-5wc5CVE-2022-25354	same package and registry as the line abovecritical	same change as the line above	Time to revision 12 days
2022-03-29published 2022-03-18	Advisory severity changed	GHSA-fx95-883v-4q4hCVE-2022-21221	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 12 days
Sat 26 Mar 2022· 1 change
2022-03-26published 2022-02-18	Advisory fix version moved	GHSA-4cpg-3vgw-4877CVE-2022-22912	npmplist critical	stated at publication 3.0.4, now states 3.0.5	Time to revision 34 days
Tue 22 Mar 2022· 3 changes
2022-03-22published 2022-03-12 to 2022-03-13	Advisory fix version moved	Show all 2 advisories in this change: Advisory fix version moved: 1.2.11 → 1.2.12 in packagistHide the 2 advisories in this change: Advisory fix version moved: 1.2.11 → 1.2.12 in packagist	packagistmicroweber/microweber moderate	stated at publication 1.2.11, now states 1.2.12	Time to revision 10 to 11 days
2022-03-22published 2022-03-12	same kind of change as the line above	GHSA-6vx5-cg2p-7g5vCVE-2022-0912	same package and registry as the line abovemoderate	same change as the line above	Time to revision 11 days
2022-03-22published 2022-03-13	same kind of change as the line above	GHSA-5fxf-x22x-5q38CVE-2022-0929	same package and registry as the line abovemoderate	same change as the line above	Time to revision 10 days
2022-03-22published 2022-03-13	Advisory severity changed	GHSA-3q55-66g3-p8xqCVE-2022-0926	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 10 days
Fri 18 Mar 2022· 10 changes
2022-03-18published 2022-03-08	Advisory severity changed	GHSA-2647-c639-qv2jCVE-2022-0766	whole advisorycritical	stated at publication MODERATE, now states CRITICALCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 11 days
2022-03-18published 2022-03-08	Advisory severity changed	GHSA-28mg-98xm-q493CVE-2022-0697	whole advisorymoderate	stated at publication LOW, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 11 days
2022-03-18published 2022-03-01 to 2022-03-06	Advisory severity changed	Show all 3 advisories in this change: Advisory severity changed: HIGH → CRITICALHide the 3 advisories in this change: Advisory severity changed: HIGH → CRITICAL	whole advisorycritical	stated at publication HIGH, now states CRITICALCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 13 to 17 days
2022-03-18published 2022-03-06	same kind of change as the line above	GHSA-r5qj-cvf9-p85hCVE-2022-0845	same package and registry as the line abovecritical	same change as the line above	Time to revision 13 days
2022-03-18published 2022-03-05	same kind of change as the line above	GHSA-jvfv-hrrc-6q72CVE-2022-0839	same package and registry as the line abovecritical	same change as the line above	Time to revision 14 days
2022-03-18published 2022-03-01	same kind of change as the line above	GHSA-r5hc-wm3g-hjw6CVE-2022-0768	same package and registry as the line abovecritical	same change as the line above	Time to revision 17 days
2022-03-18published 2022-03-04	Advisory severity changed	GHSA-99wh-973f-779pCVE-2022-0265	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 15 days
2022-03-18published 2022-02-01	Advisory severity changed	GHSA-4mpj-488r-vh6mCVE-2021-42767	whole advisorycritical	stated at publication MODERATE, now states CRITICALA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 45 days
2022-03-18published 2022-03-05	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 14 days
2022-03-18published 2022-03-05	same kind of change as the line above	GHSA-vmf7-hmh6-vv57CVE-2022-23328	same package and registry as the line abovehigh	same change as the line above	Time to revision 14 days
2022-03-18published 2022-03-05	same kind of change as the line above	GHSA-pvx3-gm3c-gmprCVE-2022-23327	same package and registry as the line abovehigh	same change as the line above	Time to revision 14 days
2022-03-18published 2022-03-15	Advisory severity changed	GHSA-6x2m-w449-qwx7CVE-2022-0811	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 3 days
Thu 17 Mar 2022· 3 changes
2022-03-17published 2022-03-11	Advisory fix version moved	GHSA-vx8q-j7h9-vf6qCVE-2022-0813	packagistphpmyadmin/phpmyadmin high	stated at publication 5.1.2, now states 5.1.3	Time to revision 7 days
2022-03-17published 2022-03-12	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 6 days
2022-03-17published 2022-03-12	same kind of change as the line above	GHSA-6c9x-mj3g-h47xCVE-2021-46708	same package and registry as the line abovemoderate	same change as the line above	Time to revision 6 days
2022-03-17published 2022-03-12	same kind of change as the line above	GHSA-cr3q-pqgq-m8c2CVE-2018-25031	same package and registry as the line abovemoderate	same change as the line above	Time to revision 6 days
Tue 15 Mar 2022· 4 changes
2022-03-15published 2022-03-06	Advisory severity changed	GHSA-2rmm-87v7-34rjCVE-2022-25312	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 10 days
2022-03-15published 2022-03-11	Advisory severity changed	GHSA-9rr6-jpg7-9jg6CVE-2021-38296	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 5 days
2022-03-15published 2022-03-01	Advisory severity changed	GHSA-32x6-qvw6-mxj4CVE-2022-24719	whole advisorylow	stated at publication HIGH, now states LOWNo CVSS vector was stated in the first observed version.	Time to revision 14 days
2022-03-15published 2021-10-12	Advisory severity changed	GHSA-3r3g-g73x-g593CVE-2021-20319	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 153 days
Mon 14 Mar 2022· 3 changes
2022-03-14published 2022-03-07	Advisory severity changed	GHSA-2877-693q-pj33CVE-2021-46704	whole advisorycritical	stated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 8 days
2022-03-14published 2022-03-07 to 2022-03-09	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: HIGH → MODERATEHide the 2 advisories in this change: Advisory severity changed: HIGH → MODERATE	whole advisorymoderate	stated at publication HIGH, now states MODERATECVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 6 to 8 days
2022-03-14published 2022-03-07	same kind of change as the line above	GHSA-8h2f-7jc4-7m3mCVE-2022-0868	same package and registry as the line abovemoderate	same change as the line above	Time to revision 8 days
2022-03-14published 2022-03-09	same kind of change as the line above	GHSA-5rcc-6cmj-7728CVE-2022-0877	same package and registry as the line abovemoderate	same change as the line above	Time to revision 6 days
Fri 11 Mar 2022· 7 changes
2022-03-11published 2022-01-12	Advisory fix version moved	GHSA-8vj2-vxx3-667wCVE-2022-22817	pypipillow critical	stated at publication 9.0.0, now states 9.0.1	Time to revision 58 days
2022-03-11published 2021-05-18	Package added to advisory	GHSA-vj3f-3286-r4pfCVE-2014-9356	go moderate	not named as affected when the advisory was published, now names github.com/docker/docker	Time to revision 297 days
2022-03-11published 2020-07-15 to 2022-01-06	Package added to advisory	Show all 3 advisories in this change: Package added to advisory: lodash-es named as affected in npmHide the 3 advisories in this change: Package added to advisory: lodash-es named as affected in npm	npm 2 bands	not named as affected when the advisory was published, now names lodash-es	Time to revision 64 to 604 days
2022-03-11published 2020-07-15	same kind of change as the line above	GHSA-p6mc-m468-83gwCVE-2020-8203	same package registry as the line abovehigh	same change as the line above	Time to revision 604 days
2022-03-11published 2021-05-06	same kind of change as the line above	GHSA-35jh-r3h4-6jhmCVE-2021-23337	same package registry as the line abovehigh	same change as the line above	Time to revision 309 days
2022-03-11published 2022-01-06	same kind of change as the line above	GHSA-29mw-wpgm-hmr9CVE-2020-28500	same package registry as the line abovemoderate	same change as the line above	Time to revision 64 days
2022-03-11published 2020-03-24	Advisory severity changed	GHSA-7q25-qrjw-6fg2CVE-2020-5252	whole advisorymoderate	stated at publication LOW, now states MODERATEThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 717 days
2022-03-11published 2021-12-09	Advisory severity changed	GHSA-vrc7-6g8w-jh56CVE-2015-9544	whole advisoryhigh	stated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.	Time to revision 92 days
Thu 10 Mar 2022· 3 changes
2022-03-10published 2022-03-01 to 2022-03-02	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 9 days
2022-03-10published 2022-03-02	same kind of change as the line above	GHSA-7r79-mrp6-8mhqCVE-2022-0777	same package and registry as the line abovehigh	same change as the line above	Time to revision 9 days
2022-03-10published 2022-03-01	same kind of change as the line above	GHSA-w6cx-qg2q-rvq8CVE-2022-24718	same package and registry as the line abovehigh	same change as the line above	Time to revision 9 days
2022-03-10published 2022-03-01	Advisory severity changed	GHSA-7f63-h6g3-7cwmCVE-2022-24717	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 9 days
Wed 9 Mar 2022· 4 changes
2022-03-09published 2019-07-19	Package added to advisory	GHSA-x5rq-j2xg-h7qmShow all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-x5rq-j2xg-h7qmHide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-x5rq-j2xg-h7qm	npm moderate	not named as affected when the advisory was published, now names lodash-amd and 1 more	Time to revision 964 days
2022-03-09published 2019-07-19	same kind of change as the line above	GHSA-x5rq-j2xg-h7qmCVE-2019-1010266	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names lodash-amd	Time to revision 964 days
2022-03-09published 2019-07-19	same kind of change as the line above	GHSA-x5rq-j2xg-h7qmCVE-2019-1010266	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names lodash-es	Time to revision 964 days
2022-03-09published 2022-03-04	Advisory severity changed	GHSA-cr6m-62pq-hmqhCVE-2022-0841	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Time to revision 6 days
2022-03-09published 2022-02-25	Advisory severity changed	GHSA-6w4v-qr4m-97ggCVE-2022-25838	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 13 days

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →