{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "airas-org-airas",
  "component": "airas",
  "generated_at": "2026-09-23T10:40:23.748Z",
  "tracking_since": "2026-07-26",
  "counts": {
    "critical": 0,
    "security": 15,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a08578-63b3-72ab-b053-8d2f11ac272d",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-55443",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.direct",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-55443"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 09:20:54.671605+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "CVE-2026-55443 no longer affects this package",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_01a08578-63b3-72ab-b053-8d2f11ac272d"
    },
    {
      "id": "chg_019fcb7b-3c35-7032-a064-e0026b0c8c32",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-28277",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-28277",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:34:39.011456+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-28277 affects this package (high)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fcb7b-3c35-7032-a064-e0026b0c8c32"
    },
    {
      "id": "chg_019fcb7b-3c36-782e-834c-a90d47acdc5d",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-48776",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-48776",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:34:39.011456+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-48776 affects this package (high)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fcb7b-3c36-782e-834c-a90d47acdc5d"
    },
    {
      "id": "chg_019fcb7b-3c37-71a4-a1e9-ecd0e367b079",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-48775",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-48775",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:34:39.011456+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-48775 affects this package (high)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fcb7b-3c37-71a4-a1e9-ecd0e367b079"
    },
    {
      "id": "chg_019fcb7b-3c37-7dad-bb7e-b63f7c34242f",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "langgraph",
        "refs": "[\"CVE-2026-55443\",\"CVE-2026-55443\",\"CVE-2026-28277\",\"CVE-2026-28277\",\"CVE-2026-48775\",\"CVE-2026-27794\",\"CVE-2026-48775\",\"CVE-2026-27794\",\"CVE-2026-48776\",\"CVE-2026-48776\"]",
        "seen": "164",
        "direct": "2",
        "package": "langgraph",
        "version": "1.0.3",
        "assessed": "165",
        "resolved": "164",
        "severity": "high",
        "transitive": "2",
        "vulnerable": "[{\"name\":\"langchain\",\"version\":\"1.0.8\",\"depth\":1,\"path\":[\"langchain\"],\"refs\":[\"CVE-2026-55443\",\"CVE-2026-55443\"]},{\"name\":\"langgraph\",\"version\":\"1.0.3\",\"depth\":1,\"path\":[\"langgraph\"],\"refs\":[\"CVE-2026-28277\",\"CVE-2026-28277\"]},{\"name\":\"langgraph-checkpoint\",\"version\":\"3.0.1\",\"depth\":2,\"path\":[\"langgraph\",\"langgraph-checkpoint\"],\"refs\":[\"CVE-2026-48775\",\"CVE-2026-27794\",\"CVE-2026-48775\",\"CVE-2026-27794\"]},{\"name\":\"langgraph-sdk\",\"version\":\"0.2.15\",\"depth\":2,\"path\":[\"langgraph\",\"langgraph-sdk\"],\"refs\":[\"CVE-2",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:34:39.011456+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fcb7b-3c37-7dad-bb7e-b63f7c34242f"
    },
    {
      "id": "chg_019fcb7b-3c38-78bc-9891-7de32e68d6ae",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-27794",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-27794",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:34:39.011456+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-27794 affects this package (high)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fcb7b-3c38-78bc-9891-7de32e68d6ae"
    },
    {
      "id": "chg_019fc7f9-f5dd-71ec-ba05-c643ab9f9d68",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "resolver_unavailable"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 14:14:35.214602+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fc7f9-f5dd-71ec-ba05-c643ab9f9d68"
    },
    {
      "id": "chg_019fc4c3-d4c7-75d2-b25f-9dcffec86807",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:16:36.144017+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fc4c3-d4c7-75d2-b25f-9dcffec86807"
    },
    {
      "id": "chg_019fc4c3-d4c8-7c8e-819e-d3f3fc290809",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "langchain",
        "refs": "[\"CVE-2026-55443\",\"CVE-2026-55443\"]",
        "seen": "71",
        "direct": "1",
        "package": "langchain",
        "version": "1.0.8",
        "assessed": "11",
        "resolved": "10",
        "severity": "medium",
        "unresolved": "61",
        "vulnerable": "[{\"name\":\"langchain\",\"version\":\"1.0.8\",\"depth\":1,\"path\":[\"langchain\"],\"refs\":[\"CVE-2026-55443\",\"CVE-2026-55443\"]}]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:16:36.144017+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fc4c3-d4c8-7c8e-819e-d3f3fc290809"
    },
    {
      "id": "chg_019fc4c3-d4c9-72ef-a2a8-c31eb70eadc8",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-55443",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-55443",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:16:36.144017+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-55443 affects this package (medium)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fc4c3-d4c9-72ef-a2a8-c31eb70eadc8"
    },
    {
      "id": "chg_019fc4c3-d4c9-7c3e-8fb4-f945fbc172c2",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:16:36.144017+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fc4c3-d4c9-7c3e-8fb4-f945fbc172c2"
    },
    {
      "id": "chg_019fc4c3-d4ca-7598-8b14-78ac3eedb3de",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:16:36.144017+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fc4c3-d4ca-7598-8b14-78ac3eedb3de"
    },
    {
      "id": "chg_019fc4c3-d4ca-7d54-9c85-470e33b420a1",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "unreachable"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:16:36.144017+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fc4c3-d4ca-7d54-9c85-470e33b420a1"
    },
    {
      "id": "chg_019fc342-234a-76a9-9495-464756743d09",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 16:15:19.338997+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fc342-234a-76a9-9495-464756743d09"
    },
    {
      "id": "chg_019fb282-5d5d-7b06-a1c0-b734013b9c71",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 10:11:55.85388+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/airas-org-airas/airas#chg-chg_019fb282-5d5d-7b06-a1c0-b734013b9c71"
    }
  ],
  "days": [
    {
      "date": "2026-09-16",
      "total": 31,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-15",
      "total": 31,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-09",
      "total": 31,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-08-26",
      "total": 31,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-12",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-11",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-04",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-08-03",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    }
  ]
}