<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>app.trysonar/sonar · sonarapp-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] sonarapp-mcp: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_01a0a792-211c-7deb-97e2-923410f56c02</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_01a0a792-211c-7deb-97e2-923410f56c02</guid><description>Stability (0.97 → pass). Compared against 2026-09-15.</description><pubDate>Wed, 16 Sep 2026 00:16:06 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] sonarapp-mcp: Malware scan (unverified → pass)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_01a01237-42da-7a41-a1cb-3481f0d00259</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_01a01237-42da-7a41-a1cb-3481f0d00259</guid><description>Malware scan (unverified → pass). Compared against 2026-08-17.</description><pubDate>Tue, 18 Aug 2026 00:13:26 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] sonarapp-mcp: Malware scan (pass → unverified)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_01a0110b-b925-7c4d-b373-46cce57847a3</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_01a0110b-b925-7c4d-b373-46cce57847a3</guid><description>Malware scan (pass → unverified). Compared against 2026-08-16.</description><pubDate>Mon, 17 Aug 2026 18:46:15 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] sonarapp-mcp: Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_01a0110b-b92b-794f-8096-f73dd9bda5d4</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_01a0110b-b92b-794f-8096-f73dd9bda5d4</guid><description>Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).). Compared against 2026-08-16.</description><pubDate>Mon, 17 Aug 2026 18:46:15 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] sonarapp-mcp: Known CVEs (partial → pass)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fd98d-ae2f-77d6-9398-165f943f8e81</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fd98d-ae2f-77d6-9398-165f943f8e81</guid><description>Known CVEs (partial → pass). Compared against 2026-08-06.</description><pubDate>Fri, 07 Aug 2026 00:09:28 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] sonarapp-mcp: Known CVEs (fail → partial)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fcf43-3c4b-70df-8340-9c22504c3d1c</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fcf43-3c4b-70df-8340-9c22504c3d1c</guid><description>Known CVEs (fail → partial). Compared against 2026-08-04.</description><pubDate>Wed, 05 Aug 2026 00:11:57 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] sonarapp-mcp: CVE-2026-69207 no longer affects this package</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fcf43-3c4a-707d-a2fe-82ffe500df5b</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fcf43-3c4a-707d-a2fe-82ffe500df5b</guid><description>CVE-2026-69207 no longer affects this package. Compared against 2026-08-04.</description><pubDate>Wed, 05 Aug 2026 00:11:57 GMT</pubDate><category>security</category><category>improvement</category><category>advisory.resolved</category></item><item><title>[SECURITY] sonarapp-mcp: CVE-2026-69207 affects this package (medium)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fca1c-0435-7d9c-9cd5-d42ab74ae18a</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fca1c-0435-7d9c-9cd5-d42ab74ae18a</guid><description>CVE-2026-69207 affects this package (medium). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 00:11:01 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] sonarapp-mcp: Known CVEs (partial → fail)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fca1c-0436-7d63-867a-2f437bf813cb</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fca1c-0436-7d63-867a-2f437bf813cb</guid><description>Known CVEs (partial → fail). Compared against 2026-08-03.</description><pubDate>Tue, 04 Aug 2026 00:11:01 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] sonarapp-mcp: Known CVEs (unverified → partial)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fc4cf-632b-7d7a-a6c7-11d02000b128</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fc4cf-632b-7d7a-a6c7-11d02000b128</guid><description>Known CVEs (unverified → partial). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 23:29:13 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] sonarapp-mcp: Provenance (fail → unverified)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fc190-4edf-7222-8836-25710f480f49</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fc190-4edf-7222-8836-25710f480f49</guid><description>Provenance (fail → unverified). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 08:21:27 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] sonarapp-mcp: Install scripts (pass → unverified)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fc190-4edf-78d8-b55e-c38caa7e4e07</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fc190-4edf-78d8-b55e-c38caa7e4e07</guid><description>Install scripts (pass → unverified). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 08:21:27 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] sonarapp-mcp: Known CVEs (partial → unverified)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fbc8f-f2ec-7307-8780-3901fcc40f6b</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fbc8f-f2ec-7307-8780-3901fcc40f6b</guid><description>Known CVEs (partial → unverified). Compared against 2026-07-31.</description><pubDate>Sat, 01 Aug 2026 09:02:58 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] sonarapp-mcp: Malware scan (pass → unverified)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fb551-8734-71e9-853e-fea538243a2a</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fb551-8734-71e9-853e-fea538243a2a</guid><description>Malware scan (pass → unverified). Compared against 2026-07-29.</description><pubDate>Thu, 30 Jul 2026 23:17:26 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] sonarapp-mcp: Provenance (unverified → fail)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fb551-8735-7672-acbc-c10a2b78df49</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fb551-8735-7672-acbc-c10a2b78df49</guid><description>Provenance (unverified → fail). Compared against 2026-07-29.</description><pubDate>Thu, 30 Jul 2026 23:17:26 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] sonarapp-mcp: Install scripts (unverified → pass)</title><link>https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fb551-8735-7c8c-9db8-7421a268ad99</link><guid isPermaLink="true">https://verifymcp.io/servers/app-trysonar-sonar/sonarapp-mcp#chg-chg_019fb551-8735-7c8c-9db8-7421a268ad99</guid><description>Install scripts (unverified → pass). Compared against 2026-07-29.</description><pubDate>Thu, 30 Jul 2026 23:17:26 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item></channel></rss>