Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

5,026 advisory changes · newest first · grouped by day

SinceClear the filter
ChangedSourceRows
Counted changes, newest first, one line per change to a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindAdvisory, Which advisory was edited, by its GHSA id.Package, The package the advisory names, and the registry it comes from.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 6 Nov 2024· 3 advisory changes
2024-11-06published 2024-11-06Advisory fix version movedGHSA-96g7-g7g9-jxw8CVE-2024-51757
npmhappy-dom
critical
stated at publication 15.10.1, now states 15.10.2Days to revision 0
2024-11-06published 2024-11-05Advisory severity changedGHSA-8pmp-678w-c8xxCVE-2024-51746whole advisorylowstated at publication MODERATE, now states LOWA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 1
2024-11-06published 2024-02-16Advisory severity changedGHSA-8h4x-xvjp-vf99CVE-2023-45860whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 264
Tue 5 Nov 2024· 7 advisory changes
2024-11-05published 2019-04-26 to 2020-04-29Package added to advisorymoderatenot named as affected when the advisory was published, now names maximebf/debugbarnot dated
2024-11-05published 2020-04-29same kind of change as the line aboveGHSA-gxr4-xjj5-5px2CVE-2020-11022same package registry as the line abovemoderatesame change as the line abovenot dated
2024-11-05published 2019-04-26same kind of change as the line aboveGHSA-6c3j-c64m-qhgqCVE-2019-11358same package registry as the line abovemoderatesame change as the line abovenot dated
2024-11-05published 2024-09-13Package added to advisoryGHSA-cx7f-g6mp-7hqmCVE-2024-38816highnot named as affected when the advisory was published, now names org.springframework:spring-webfluxDays to revision 53
2024-11-05published 2024-10-25Advisory severity changedGHSA-xj7w-r753-vj8vCVE-2022-45157whole advisoryhighstated at publication CRITICAL, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 11
2024-11-05published 2024-11-04Advisory severity changedGHSA-752q-72qc-rc66CVE-2024-23590whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 1
2024-11-05published 2024-11-04Advisory severity changedGHSA-7vm6-qwh5-9x44CVE-2024-51502whole advisorymoderatestated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 1
2024-11-05published 2024-08-05Advisory withdrawnGHSA-w7c4-5w4f-jm3gCVE-2024-36117whole advisoryhighwithdrawn 2024-11-05Days to revision 92
Mon 4 Nov 2024· 3 advisory changes
2024-11-04published 2024-06-06Advisory severity changedGHSA-v9q6-fm48-rx74CVE-2024-3408whole advisoryhighstated at publication CRITICAL, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 151
2024-11-04published 2024-09-13Advisory severity changedGHSA-w73r-8mm4-cfvfCVE-2024-6582whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 52
2024-11-04published 2024-06-06Advisory severity changedGHSA-3xr8-qfvj-9p9jCVE-2024-4888whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 151
Thu 31 Oct 2024· 4 advisory changes
2024-10-31published 2021-05-21Advisory severity changedGHSA-whr9-vfh2-7hm6CVE-2021-29571whole advisorylowstated at publication MODERATE, now states LOWA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-31published 2024-10-15Advisory severity changedwhole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 16
2024-10-31published 2024-10-15same kind of change as the line aboveGHSA-h47h-mwp9-c6q6CVE-2024-47889same package and registry as the line abovemoderatesame change as the line aboveDays to revision 16
2024-10-31published 2024-10-15same kind of change as the line aboveGHSA-wwhv-wxv9-rpgwCVE-2024-47888same package and registry as the line abovemoderatesame change as the line aboveDays to revision 16
2024-10-31published 2024-10-15same kind of change as the line aboveGHSA-vfg9-r3fq-jvx4CVE-2024-47887same package and registry as the line abovemoderatesame change as the line aboveDays to revision 16
Wed 30 Oct 2024· 11 advisory changes
2024-10-30published 2024-10-29Package added to advisoryGHSA-45pg-36p6-83v9CVE-2024-8309lownot named as affected when the advisory was published, now names langchain-communityDays to revision 1
2024-10-30published 2024-07-05 to 2024-07-11Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.Days to revision 111 to 118
2024-10-30published 2024-07-05same kind of change as the line aboveGHSA-r4v4-w9pv-6fphCVE-2024-32498same package and registry as the line abovehighsame change as the line aboveDays to revision 118
2024-10-30published 2024-07-11same kind of change as the line aboveGHSA-2h2x-8hh2-mfq8CVE-2022-29946same package and registry as the line abovehighsame change as the line aboveDays to revision 111
2024-10-30published 2024-06-07Advisory severity changedGHSA-hx54-pf28-7xchCVE-2024-37388whole advisoryhighstated at publication CRITICAL, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 145
2024-10-30published 2020-01-28Advisory severity changedGHSA-977j-xj7q-2jr9CVE-2020-5215whole advisorylowstated at publication HIGH, now states LOWA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-30published 2020-12-10Advisory severity changedGHSA-q263-fvxm-m5mwCVE-2020-26271whole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-30published 2020-11-13Advisory severity changedGHSA-rrfp-j2mp-hq9cCVE-2020-15265whole advisoryhighstated at publication LOW, now states HIGHA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-30published 2020-09-25Advisory severity changedGHSA-hx2x-85gr-wrpqCVE-2020-15212whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-30published 2020-09-25Advisory severity changedGHSA-q4qf-3fc6-8x34CVE-2020-15207whole advisorymoderatestated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-30published 2020-09-25Advisory severity changedGHSA-g7p5-5759-qv46CVE-2020-15205whole advisorymoderatestated at publication CRITICAL, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-30published 2023-06-28Advisory severity changedGHSA-h42j-mrmp-9369CVE-2023-26134whole advisoryhighstated at publication CRITICAL, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 491
Mon 28 Oct 2024· 27 advisory changes
2024-10-28published 2022-05-14Package added to advisoryGHSA-vpqp-hx68-p2wxCVE-2013-2217moderatenot named as affected when the advisory was published, now names suds-py3not dated
2024-10-28published 2019-04-24Package added to advisoryGHSA-frxx-2m33-6wcrCVE-2018-8825highnot named as affected when the advisory was published, now names tensorflow-gpunot dated
2024-10-28published 2020-09-25Advisory severity changedwhole advisoryhighstated at publication CRITICAL, now states HIGHA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-28published 2020-09-25same kind of change as the line aboveGHSA-h6fg-mjxg-hqq4CVE-2020-15202same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-28published 2020-09-25same kind of change as the line aboveGHSA-w5gh-2wr2-pm6gCVE-2020-15206same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-28published 2020-05-13 to 2020-09-25Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-28published 2020-09-25same kind of change as the line aboveGHSA-x7rp-74x2-mjf3CVE-2020-15200same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-28published 2020-09-25same kind of change as the line aboveGHSA-x9j7-x98r-r4w2CVE-2020-15210same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-28published 2020-09-25same kind of change as the line aboveGHSA-x5cp-9pcf-pp3hCVE-2020-15199same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-28published 2020-09-25same kind of change as the line aboveGHSA-qh32-6jjc-qprmCVE-2020-15209same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-28published 2020-05-13same kind of change as the line aboveGHSA-h98h-8mxr-m8gxCVE-2018-21233same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-28published 2020-09-25 to 2020-10-13Advisory severity changedwhole advisorymoderatestated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-28published 2020-09-25same kind of change as the line aboveGHSA-63xm-rx5p-xvqrCVE-2020-15195same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-28published 2020-09-25same kind of change as the line aboveGHSA-pg59-2f92-5cphCVE-2020-15196same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-28published 2020-10-13same kind of change as the line aboveGHSA-j257-jfvv-h3x5CVE-2020-15251same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-28published 2020-11-13 to 2020-12-10Advisory severity changedwhole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-28published 2020-12-10same kind of change as the line aboveGHSA-m648-33qf-v3gpCVE-2020-26270same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-28published 2020-12-10same kind of change as the line aboveGHSA-hhvc-g5hv-48c6CVE-2020-26268same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-28published 2020-12-10same kind of change as the line aboveGHSA-qhxx-j73r-qpm2CVE-2020-26266same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-28published 2020-11-13same kind of change as the line aboveGHSA-xwhf-g6j5-j5gcCVE-2020-15266same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-28published 2024-10-24Advisory severity changedGHSA-p3m2-mj3j-j49xCVE-2024-46998whole advisorymoderatestated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.Days to revision 4
2024-10-28published 2023-02-14Advisory severity changedGHSA-74m5-2c7w-9w3xCVE-2023-30798whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 622
2024-10-28published 2020-09-25Advisory severity changedGHSA-p2cq-cprg-frvmCVE-2020-15214whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-28published 2022-05-14Advisory severity changedGHSA-hfg2-wf6j-x53pCVE-2012-0805whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 899
2024-10-28published 2022-05-14Advisory severity changedGHSA-vpqp-hx68-p2wxCVE-2013-2217whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.not dated
2024-10-28published 2023-05-17Advisory severity changedGHSA-v5gw-mw7f-84pxCVE-2023-29159whole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.Days to revision 530
2024-10-28published 2019-04-24 to 2019-04-30Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-28published 2019-04-30same kind of change as the line aboveGHSA-mfg7-x5m7-6p8wCVE-2019-9635same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-28published 2019-04-24same kind of change as the line aboveGHSA-jfq2-rj7f-9gvfCVE-2018-7576same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-28published 2019-04-16Advisory severity changedGHSA-38fc-9xqv-7f7qCVE-2019-7548whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-28published 2021-06-18Advisory severity changedGHSA-jqmc-fxxp-r589CVE-2020-14942whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-28published 2023-04-21Advisory withdrawnGHSA-3qj8-93xh-pwh2whole advisoryhighwithdrawn 2024-10-28Days to revision 556
Sun 27 Oct 2024· 1 advisory change
2024-10-27published 2019-03-25Advisory severity changedGHSA-f58w-649r-qjr9CVE-2019-5729whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.not dated
Sat 26 Oct 2024· 11 advisory changes
2024-10-26published 2022-05-24Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 886
2024-10-26published 2022-05-24same kind of change as the line aboveGHSA-xf37-qcvf-7m57CVE-2021-22004same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-26published 2022-05-24same kind of change as the line aboveGHSA-w589-r335-4f55CVE-2020-28972same package and registry as the line abovehighsame change as the line aboveDays to revision 886
2024-10-26published 2022-05-24 to 2022-11-15Advisory severity changedwhole advisoryhighstated at publication CRITICAL, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 711 to 886
2024-10-26published 2022-05-24same kind of change as the line aboveGHSA-76x4-x3p6-rpr9CVE-2021-25282same package and registry as the line abovehighsame change as the line aboveDays to revision 886
2024-10-26published 2022-11-15same kind of change as the line aboveGHSA-94qm-99qc-qwqjCVE-2022-3362same package and registry as the line abovehighsame change as the line aboveDays to revision 711
2024-10-26published 2022-05-24Advisory severity changedGHSA-vp49-2g4r-m3x3CVE-2020-11652whole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 886
2024-10-26published 2022-05-17Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 894
2024-10-26published 2022-05-17same kind of change as the line aboveGHSA-jmv9-5gx8-7xpfCVE-2013-4439same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-26published 2022-05-17same kind of change as the line aboveGHSA-v89f-4mc4-h6w9CVE-2013-4435same package and registry as the line abovehighsame change as the line aboveDays to revision 894
2024-10-26published 2022-05-01Advisory severity changedGHSA-j59j-h3g7-cpmfCVE-2008-1475whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 909
2024-10-26published 2021-03-29 to 2021-04-30Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-26published 2021-04-30same kind of change as the line aboveGHSA-xrx6-fmxq-rjj2CVE-2020-25658same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-26published 2021-03-29same kind of change as the line aboveGHSA-mpvw-25mg-59vxCVE-2020-28463same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-26published 2022-11-16Advisory severity changedGHSA-4wph-9vrm-6v3wCVE-2022-4018whole advisorylowstated at publication MODERATE, now states LOWA CVSS version was added; the existing vectors stayed the same.Days to revision 710
Fri 25 Oct 2024· 19 advisory changes
2024-10-25published 2020-08-21 to 2020-12-08Advisory severity changedwhole advisorymoderatestated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-25published 2020-12-08same kind of change as the line aboveGHSA-hm45-mgqm-gjm4CVE-2020-26249same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-25published 2020-08-21same kind of change as the line aboveGHSA-55j9-849x-26h4CVE-2020-15140same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-25published 2023-03-26Advisory severity changedGHSA-24wv-mv5m-xv4hCVE-2023-28858whole advisorymoderatestated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 52
2024-10-25published 2022-05-13 to 2022-12-27Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 668 to 897
2024-10-25published 2022-12-22same kind of change as the line aboveGHSA-85fp-523q-5xwcCVE-2022-4646same package and registry as the line abovehighsame change as the line aboveDays to revision 674
2024-10-25published 2022-12-27same kind of change as the line aboveGHSA-7q4r-x5qg-mmcpCVE-2022-4723same package and registry as the line abovehighsame change as the line aboveDays to revision 668
2024-10-25published 2022-05-17same kind of change as the line aboveGHSA-f9q5-46qg-74x4CVE-2013-6418same package and registry as the line abovehighsame change as the line aboveDays to revision 893
2024-10-25published 2022-05-17same kind of change as the line aboveGHSA-4rrr-j7ff-r844CVE-2013-2104same package and registry as the line abovehighsame change as the line aboveDays to revision 893
2024-10-25published 2022-05-13same kind of change as the line aboveGHSA-3g2p-7c6p-vj8cCVE-2013-1909same package and registry as the line abovehighsame change as the line aboveDays to revision 897
2024-10-25published 2022-05-14same kind of change as the line aboveGHSA-qgfg-gvff-523vCVE-2013-4111same package and registry as the line abovehighsame change as the line aboveDays to revision 896
2024-10-25published 2022-05-14same kind of change as the line aboveGHSA-2q4h-27m7-rj67CVE-2013-2191same package and registry as the line abovehighsame change as the line aboveDays to revision 896
2024-10-25published 2022-09-27Advisory severity changedGHSA-qq29-5vjh-vxwrCVE-2022-3301whole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-25published 2022-09-09Advisory severity changedGHSA-m379-x4xc-38x9CVE-2022-3167whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-25published 2022-05-17Advisory severity changedGHSA-p3xv-97g8-4wmjCVE-2013-6396whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 893
2024-10-25published 2018-11-06Advisory severity changedGHSA-vcr5-xr9h-mvc5CVE-2014-1929whole advisorycriticalstated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.not dated
2024-10-25published 2021-08-09Advisory severity changedGHSA-hwfp-hg2m-9vr2CVE-2021-32559whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-25published 2021-04-20Advisory severity changedGHSA-3pqx-4fqf-j49fCVE-2019-20477whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-25published 2022-05-17Advisory severity changedGHSA-gwvq-rgqf-993fCVE-2014-0105whole advisorylowstated at publication MODERATE, now states LOWA CVSS version was added; the existing vectors stayed the same.Days to revision 893
2024-10-25published 2018-11-06Advisory severity changedGHSA-2jc8-4r6g-282jCVE-2014-1928whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.not dated
2024-10-25published 2021-12-09Advisory severity changedGHSA-ggmr-44cv-24pmCVE-2021-43811whole advisoryhighstated at publication MODERATE, now states HIGHThe severity label changed while the stated CVSS vectors stayed the same.not dated
Thu 24 Oct 2024· 9 advisory changes
2024-10-24published 2021-09-01 to 2022-09-23Package added to advisorymoderatenot named as affected when the advisory was published, now names pallet-ethereumnot dated
2024-10-24published 2022-09-23same kind of change as the line aboveGHSA-v57h-6hmh-g2p4CVE-2022-39242same package registry as the line abovemoderatesame change as the line abovenot dated
2024-10-24published 2021-10-13same kind of change as the line aboveGHSA-vj62-g63v-f8mfCVE-2021-41138same package registry as the line abovemoderatesame change as the line abovenot dated
2024-10-24published 2021-09-01same kind of change as the line aboveGHSA-hw4v-5x4h-c3xmCVE-2021-39193same package registry as the line abovemoderatesame change as the line abovenot dated
2024-10-24published 2022-01-14 to 2023-03-21Package added to advisory2 bandsnot named as affected when the advisory was published, now names pallet-evm-precompile-modexpDays to revision 583
2024-10-24published 2022-01-14same kind of change as the line aboveGHSA-cjg2-2fjg-fph4CVE-2022-21685same package registry as the line abovemoderatesame change as the line abovenot dated
2024-10-24published 2023-03-21same kind of change as the line aboveGHSA-fcmm-54jp-7vf6CVE-2023-28431same package registry as the line abovehighsame change as the line aboveDays to revision 583
2024-10-24published 2022-08-18Package added to advisoryGHSA-mjvm-mhgc-q4gpCVE-2022-36008moderatenot named as affected when the advisory was published, now names fc-rpcnot dated
2024-10-24published 2019-08-08Package added to advisoryGHSA-fp5j-3fpf-mhj5CVE-2019-10099highnot named as affected when the advisory was published, now names pysparknot dated
2024-10-24published 2022-05-17Advisory severity changedGHSA-69vw-jfq7-935gCVE-2011-0432whole advisorycriticalstated at publication HIGH, now states CRITICALNo CVSS vector was stated in the first observed version.Days to revision 892
2024-10-24published 2022-05-17Advisory severity changedGHSA-6748-36qp-fx6rCVE-2013-4314whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 892
Wed 23 Oct 2024· 3 advisory changes
2024-10-23published 2022-05-17Advisory severity changedGHSA-q6w2-jxcm-2crjCVE-2008-7263whole advisorymoderatestated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-23published 2022-05-05Advisory severity changedGHSA-q4v3-wmm6-hcrxCVE-2013-0294whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 903
2024-10-23published 2018-12-21Advisory severity changedGHSA-gfv6-cj92-g3hxCVE-2018-1000872whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.not dated
Tue 22 Oct 2024· 2 advisory changes
2024-10-22published 2022-03-01Advisory fix version movedGHSA-cjvr-mfj7-j4j8CVE-2022-0577
pypiscrapy
moderate
stated at publication 2.6.0, now states 2.6.1not dated
2024-10-22published 2024-10-18Advisory severity changedGHSA-4gc7-5j7h-4qphCVE-2024-38820whole advisorymoderatestated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 5
Mon 21 Oct 2024· 22 advisory changes
2024-10-21published 2019-03-14Package added to advisoryGHSA-6mqq-8r44-vmjcCVE-2018-1334moderatenot named as affected when the advisory was published, now names pysparknot dated
2024-10-21published 2021-04-06Package added to advisoryGHSA-gg2g-m5wc-vccqCVE-2021-21423highnot named as affected when the advisory was published, now names projennot dated
2024-10-21published 2018-07-13Advisory severity changedGHSA-924m-4pmx-c67hCVE-2017-1000433whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-21published 2018-10-10Advisory severity changedGHSA-2rcm-phc9-3945CVE-2018-1000808whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-21published 2022-05-01Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.not dated
2024-10-21published 2022-05-01same kind of change as the line aboveGHSA-cx59-cp6c-9fr8CVE-2007-6740same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-21published 2022-05-01same kind of change as the line aboveGHSA-5f3f-pg2c-cxcvCVE-2007-6739same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-21published 2022-05-01 to 2022-05-17Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 889 to 904
2024-10-21published 2022-05-01same kind of change as the line aboveGHSA-gh7c-cg3x-pmcrCVE-2007-6738same package and registry as the line abovehighsame change as the line aboveDays to revision 904
2024-10-21published 2022-05-17same kind of change as the line aboveGHSA-hw4g-fhcp-x5mqCVE-2010-3494same package and registry as the line abovehighsame change as the line abovenot dated
2024-10-21published 2022-05-17same kind of change as the line aboveGHSA-x377-f64p-hf5jCVE-2013-1445same package and registry as the line abovehighsame change as the line aboveDays to revision 889
2024-10-21published 2022-05-17same kind of change as the line aboveGHSA-6476-g47x-h3c7CVE-2012-1176same package and registry as the line abovehighsame change as the line aboveDays to revision 889
2024-10-21published 2023-09-28Advisory severity changedGHSA-8mjr-6c96-39w8CVE-2023-26145whole advisorycriticalstated at publication HIGH, now states CRITICALA CVSS version was added; the existing vectors stayed the same.Days to revision 390
2024-10-21published 2024-01-05Advisory severity changedGHSA-j225-cvw7-qrx7CVE-2023-52323whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 291
2024-10-21published 2020-09-18Advisory severity changedGHSA-vwcg-7xqw-qcxwCVE-2020-25489whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.not dated
2024-10-21published 2021-10-19Advisory severity changedGHSA-x95h-979x-cf3jCVE-2021-42576whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.not dated
2024-10-21published 2021-05-13Advisory severity changedGHSA-5jqp-qgf6-3pvhCVE-2021-29510whole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-21published 2021-03-08Advisory severity changedGHSA-p75f-g7gx-2r7pCVE-2021-21336whole advisoryhighstated at publication LOW, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 455
2024-10-21published 2023-04-20Advisory severity changedGHSA-wh3w-jcc7-mhmfCVE-2023-28459whole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 550
2024-10-21published 2021-08-05Advisory severity changedGHSA-q3m9-9fj2-mfwrCVE-2021-32806whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-21published 2021-03-08 to 2021-03-09Advisory severity changedwhole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.not dated
2024-10-21published 2021-03-09same kind of change as the line aboveGHSA-jff3-mwp3-f8cwCVE-2021-21360same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-21published 2021-03-08same kind of change as the line aboveGHSA-p44j-xrqg-4xrrCVE-2021-21337same package and registry as the line abovemoderatesame change as the line abovenot dated
2024-10-21published 2022-05-01Advisory severity changedGHSA-9x66-ghqx-8g5rCVE-2007-6737whole advisorymoderatestated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.not dated
2024-10-21published 2024-10-21Advisory severity changedGHSA-584q-6j8j-r5pmCVE-2024-48930whole advisoryhighstated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 0
Fri 18 Oct 2024· 9 advisory changes
2024-10-18published 2024-10-14Advisory fix version movedGHSA-pf5v-pqfv-x8jjCVE-2024-48911
pypiopencanary
moderate
stated at publication 0.9.4, now states 0.9.5Days to revision 4
2024-10-18published 2022-05-17 to 2022-05-24Package added to advisoryhighnot named as affected when the advisory was published, now names ploneDays to revision 878 to 886
2024-10-18published 2022-05-24same kind of change as the line aboveGHSA-cjg3-q24h-9qwfCVE-2020-7938same package registry as the line abovehighsame change as the line aboveDays to revision 878
2024-10-18published 2022-05-17same kind of change as the line aboveGHSA-984m-rj28-8c6xCVE-2015-7315same package registry as the line abovehighsame change as the line aboveDays to revision 886
2024-10-18published 2022-05-17Advisory severity changedGHSA-j67j-8hrp-76xmCVE-2013-4195whole advisorylowstated at publication MODERATE, now states LOWA CVSS version was added; the existing vectors stayed the same.Days to revision 886
2024-10-18published 2022-05-13 to 2022-05-17Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 886 to 890
2024-10-18published 2022-05-17same kind of change as the line aboveGHSA-984m-rj28-8c6xCVE-2015-7315same package and registry as the line abovehighsame change as the line aboveDays to revision 886
2024-10-18published 2022-05-13same kind of change as the line aboveGHSA-qc57-h2f7-p4hxCVE-2017-1000483same package and registry as the line abovehighsame change as the line aboveDays to revision 890
2024-10-18published 2022-05-17Advisory severity changedGHSA-mm32-jw73-9227CVE-2013-4194whole advisorymoderatestated at publication LOW, now states MODERATEA CVSS version was added; the existing vectors stayed the same.Days to revision 886
2024-10-18published 2022-05-17Advisory severity changedGHSA-qqgj-22gr-73vxCVE-2016-4041whole advisorymoderatestated at publication HIGH, now states MODERATEA CVSS version was added; the existing vectors stayed the same.Days to revision 886
2024-10-18published 2024-10-02Advisory severity changedGHSA-qvqv-mcxr-x8qwCVE-2024-9440whole advisorymoderatestated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.Days to revision 16
Thu 17 Oct 2024· 4 advisory changes
2024-10-17published 2020-12-09 to 2022-05-13Package added to advisory2 bandsnot named as affected when the advisory was published, now names org.codehaus.groovy:groovy-allnot dated
2024-10-17published 2022-05-13same kind of change as the line aboveGHSA-xphj-m9cc-8fmqCVE-2016-6814same package registry as the line abovecriticalsame change as the line abovenot dated
2024-10-17published 2020-12-09same kind of change as the line aboveGHSA-rcjj-h6gh-jf3rCVE-2020-17521same package registry as the line abovemoderatesame change as the line abovenot dated
2024-10-17published 2022-05-13same kind of change as the line aboveGHSA-qg25-hgjv-cg9qCVE-2015-3253same package registry as the line abovecriticalsame change as the line abovenot dated
2024-10-17published 2022-05-17Advisory severity changedGHSA-6fgf-x7wg-hp8rCVE-2013-4193whole advisoryhighstated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.Days to revision 885
Wed 16 Oct 2024· 4 advisory changes
2024-10-16published 2020-01-31Package added to advisoryGHSA-7q36-4xx7-xcxfCVE-2020-5234moderatenot named as affected when the advisory was published, now names messagepack.unitynot dated
2024-10-16published 2024-02-11 to 2024-10-16Advisory severity changedwhole advisoryhighstated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.Days to revision 0 to 249
2024-10-16published 2024-02-11same kind of change as the line aboveGHSA-gvpg-vgmx-xg6wCVE-2023-52428same package and registry as the line abovehighsame change as the line aboveDays to revision 249
2024-10-16published 2024-10-16same kind of change as the line aboveGHSA-h7w9-c5vx-x7j3CVE-2024-45217same package and registry as the line abovehighsame change as the line aboveDays to revision 0
2024-10-16published 2024-10-15Advisory severity changedGHSA-x76w-6vjr-8xgjCVE-2024-41128whole advisorymoderatestated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.Days to revision 1

Counted in advisories, never added to the CVE and KEV figures. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →