{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "bidsketch-signwell-mcp",
  "component": "signwell-mcp",
  "generated_at": "2026-10-23T18:58:56.666Z",
  "tracking_since": "2026-09-29",
  "counts": {
    "critical": 0,
    "security": 7,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a15c04-465e-766d-abda-f3ed895ff5dd",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-111771",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-111771",
        "severity": "high"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 01:12:26.43202+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "CVE-2026-111771 affects this package (high)",
      "link": "https://verifymcp.io/servers/bidsketch-signwell-mcp/signwell-mcp#chg-chg_01a15c04-465e-766d-abda-f3ed895ff5dd"
    },
    {
      "id": "chg_01a15c04-465f-7c2a-9ca8-18189b090a41",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-111768",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-111768",
        "severity": "high"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 01:12:26.43202+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "CVE-2026-111768 affects this package (high)",
      "link": "https://verifymcp.io/servers/bidsketch-signwell-mcp/signwell-mcp#chg-chg_01a15c04-465f-7c2a-9ca8-18189b090a41"
    },
    {
      "id": "chg_01a15c04-4660-7313-a424-c668c5792869",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-111769",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-111769",
        "severity": "high"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 01:12:26.43202+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "CVE-2026-111769 affects this package (high)",
      "link": "https://verifymcp.io/servers/bidsketch-signwell-mcp/signwell-mcp#chg-chg_01a15c04-4660-7313-a424-c668c5792869"
    },
    {
      "id": "chg_01a15c04-4660-79d4-9162-b920ffb54887",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-111767",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-111767",
        "severity": "high"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 01:12:26.43202+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "CVE-2026-111767 affects this package (high)",
      "link": "https://verifymcp.io/servers/bidsketch-signwell-mcp/signwell-mcp#chg-chg_01a15c04-4660-79d4-9162-b920ffb54887"
    },
    {
      "id": "chg_01a12ce6-a07a-7ddb-a019-7bb3d085466b",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-104850",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-104850",
        "severity": "high"
      },
      "occurred_on": "2026-10-11",
      "occurred_at": "2026-10-11 21:37:54.277937+00",
      "observed_since": "2026-10-04",
      "source": "scan",
      "summary": "CVE-2026-104850 affects this package (high)",
      "link": "https://verifymcp.io/servers/bidsketch-signwell-mcp/signwell-mcp#chg-chg_01a12ce6-a07a-7ddb-a019-7bb3d085466b"
    },
    {
      "id": "chg_01a12ce6-a07c-7057-9bae-996b5483a397",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.direct",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@modelcontextprotocol/sdk",
        "refs": "[\"CVE-2026-104850\"]",
        "seen": "114",
        "direct": "1",
        "package": "@modelcontextprotocol/sdk",
        "version": "1.29.0",
        "assessed": "115",
        "resolved": "114",
        "severity": "high",
        "vulnerable": "[{\"name\":\"@modelcontextprotocol/sdk\",\"version\":\"1.29.0\",\"depth\":1,\"path\":[\"@modelcontextprotocol/sdk\"],\"refs\":[\"CVE-2026-104850\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-11",
      "occurred_at": "2026-10-11 21:37:54.277937+00",
      "observed_since": "2026-10-04",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/bidsketch-signwell-mcp/signwell-mcp#chg-chg_01a12ce6-a07c-7057-9bae-996b5483a397"
    },
    {
      "id": "chg_01a0efdf-9282-76d4-93f1-cf28bb1a89f9",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-30",
      "occurred_at": "2026-09-30 01:13:21.738587+00",
      "observed_since": "2026-09-29",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/bidsketch-signwell-mcp/signwell-mcp#chg-chg_01a0efdf-9282-76d4-93f1-cf28bb1a89f9"
    }
  ],
  "days": [
    {
      "date": "2026-10-22",
      "total": 43,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-21",
      "total": 43,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 4
    },
    {
      "date": "2026-10-12",
      "total": 43,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-11",
      "total": 43,
      "delta": -6,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-09-30",
      "total": 49,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-29",
      "total": 34,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}