{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "26zl-cybersec-toolkit",
  "component": "ghcr-io-26zl-cybersec-toolkit",
  "generated_at": "2026-11-05T13:05:02.106Z",
  "tracking_since": "2026-10-15",
  "counts": {
    "critical": 7,
    "security": 2,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a19104-ffc0-7bba-a6b7-4df420c18caf",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-114616",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-114616",
        "severity": "high"
      },
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 08:13:06.341582+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "CVE-2026-114616 affects this package (high)",
      "link": "https://verifymcp.io/servers/26zl-cybersec-toolkit/ghcr-io-26zl-cybersec-toolkit#chg-chg_01a19104-ffc0-7bba-a6b7-4df420c18caf"
    },
    {
      "id": "chg_01a19104-ffc2-707c-a60a-221709ad1eba",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-114615",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-114615",
        "severity": "high"
      },
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 08:13:06.341582+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "CVE-2026-114615 affects this package (high)",
      "link": "https://verifymcp.io/servers/26zl-cybersec-toolkit/ghcr-io-26zl-cybersec-toolkit#chg-chg_01a19104-ffc2-707c-a60a-221709ad1eba"
    },
    {
      "id": "chg_01a18bdf-b0b6-72d4-a6fb-23c48deee9af",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-111497",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-111497",
        "severity": "high"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 08:14:15.19211+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "CVE-2026-111497 affects this package (high)",
      "link": "https://verifymcp.io/servers/26zl-cybersec-toolkit/ghcr-io-26zl-cybersec-toolkit#chg-chg_01a18bdf-b0b6-72d4-a6fb-23c48deee9af"
    },
    {
      "id": "chg_01a18190-bd50-7709-88fa-06f5f8be4077",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-96760",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-96760",
        "severity": "high"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 08:11:48.9104+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "CVE-2026-96760 affects this package (high)",
      "link": "https://verifymcp.io/servers/26zl-cybersec-toolkit/ghcr-io-26zl-cybersec-toolkit#chg-chg_01a18190-bd50-7709-88fa-06f5f8be4077"
    },
    {
      "id": "chg_01a15d85-f51d-73aa-bdc6-e9c04fd245ea",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-6q48-6c7w-9gw2",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "none",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "GHSA-6q48-6c7w-9gw2",
        "severity": "none"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 08:13:42.522926+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "GHSA-6q48-6c7w-9gw2 affects this package (none)",
      "link": "https://verifymcp.io/servers/26zl-cybersec-toolkit/ghcr-io-26zl-cybersec-toolkit#chg-chg_01a15d85-f51d-73aa-bdc6-e9c04fd245ea"
    },
    {
      "id": "chg_01a15d85-f51f-71e5-ad3b-eb062eb2689c",
      "kind": "check.reason",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.critical_no_fix",
      "to_code": "cve.unpatched_critical",
      "from_value": "fail",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "path": "ca-certificates",
        "refs": "[\"GHSA-6q48-6c7w-9gw2\"]",
        "seen": "745",
        "direct": "37",
        "package": "ca-certificates",
        "version": "20260601~26.04.1",
        "assessed": "400",
        "resolved": "400",
        "severity": "none",
        "unresolved": "345",
        "vulnerable": "[{\"name\":\"util-linux\",\"version\":\"2.41.3-3ubuntu2.2\",\"depth\":1,\"path\":[\"bsdutils\"],\"refs\":[\"CVE-2026-76642\",\"CVE-2026-78408\",\"CVE-2026-78409\",\"CVE-2026-78410\"]},{\"name\":\"ca-certificates\",\"version\":\"20260601~26.04.1\",\"depth\":1,\"path\":[\"ca-certificates\"],\"refs\":[\"USN-8944-1\"]},{\"name\":\"certifi\",\"version\":\"2026.7.22\",\"depth\":1,\"path\":[\"certifi\"],\"refs\":[\"GHSA-6q48-6c7w-9gw2\",\"PYSEC-2026-4320\"]},{\"name\":\"dash\",\"version\":\"0.5.12-12ubuntu3\",\"depth\":1,\"path\":[\"dash\"],\"refs\":[\"CVE-2026-102473\",\"CVE-2026-102474\"]},{\"",
        "no_fix_refs": "[\"CVE-2026-76642\",\"CVE-2026-78408\",\"CVE-2026-78409\",\"CVE-2026-78410\",\"CVE-2026-102473\",\"CVE-2026-102474\",\"CVE-2024-52005\",\"CVE-2024-52005\",\"CVE-2026-105712\",\"CVE-2026-54369\",\"CVE-2026-54370\",\"CVE-2026-76642\",\"CVE-2026-78408\",\"CVE-2026-78409\",\"CVE-2026-78410\",\"CVE-2026-18374\",\"CVE-2026-8674\",\"CVE-2026-86805\",\"CVE-2026-89092\",\"CVE-2026-95818\",\"CVE-2026-97399\",\"CVE-2026-18374\",\"CVE-2026-8674\",\"CVE-2026-86805\",\"CVE-2026-89092\",\"CVE-2026-95818\",\"CVE-2026-97399\",\"CVE-2026-18374\",\"CVE-2026-8674\",\"CVE-2026-86805\",\"",
        "sbom_signer": "https://github.com/26zl/cybersec-toolkit/.github/workflows/publish-image.yml@refs/tags/v1.4.0",
        "tree_source": "sbom",
        "tree_status": "partial",
        "sbom_verified": "true"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 08:13:42.522926+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Known CVEs (CVE check failed: an unpatched critical CVE affects this package; the score is capped at 0.)",
      "link": "https://verifymcp.io/servers/26zl-cybersec-toolkit/ghcr-io-26zl-cybersec-toolkit#chg-chg_01a15d85-f51f-71e5-ad3b-eb062eb2689c"
    },
    {
      "id": "chg_01a15d85-f51f-7b20-9316-c3ff57885ba9",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-95210",
      "subject_child": "",
      "from_code": "cve.critical_no_fix",
      "to_code": "cve.unpatched_critical",
      "from_value": "none",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-95210"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 08:13:42.522926+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "CVE-2026-95210 no longer affects this package",
      "link": "https://verifymcp.io/servers/26zl-cybersec-toolkit/ghcr-io-26zl-cybersec-toolkit#chg-chg_01a15d85-f51f-7b20-9316-c3ff57885ba9"
    },
    {
      "id": "chg_01a15d85-f520-71ea-a2b5-e1d3b5c33a99",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-88647",
      "subject_child": "",
      "from_code": "cve.critical_no_fix",
      "to_code": "cve.unpatched_critical",
      "from_value": "none",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-88647"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 08:13:42.522926+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "CVE-2026-88647 no longer affects this package",
      "link": "https://verifymcp.io/servers/26zl-cybersec-toolkit/ghcr-io-26zl-cybersec-toolkit#chg-chg_01a15d85-f520-71ea-a2b5-e1d3b5c33a99"
    },
    {
      "id": "chg_01a15d85-f521-754d-82aa-0d1110d2c575",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 08:13:42.522926+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/26zl-cybersec-toolkit/ghcr-io-26zl-cybersec-toolkit#chg-chg_01a15d85-f521-754d-82aa-0d1110d2c575"
    }
  ],
  "days": [
    {
      "date": "2026-10-31",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-30",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-28",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-21",
      "total": 0,
      "delta": -20,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-10-15",
      "total": 20,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}