BPMN Kit · bpmnkit-cli · changes | VerifyMCPRecorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.https://verifymcp.io[SECURITY] bpmnkit-cli: CVE-2026-121425 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-0838-7ad8-8243-dbce25e23ec2https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-0838-7ad8-8243-dbce25e23ec2CVE-2026-121425 affects this package (high). Compared against 2026-11-03.Wed, 04 Nov 2026 04:10:10 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: CVE-2026-121424 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083b-794a-8ae9-02948f4ec2c0https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083b-794a-8ae9-02948f4ec2c0CVE-2026-121424 affects this package (high). Compared against 2026-11-03.Wed, 04 Nov 2026 04:10:10 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: CVE-2026-121426 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083c-7052-a546-3aa20178bea2https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083c-7052-a546-3aa20178bea2CVE-2026-121426 affects this package (high). Compared against 2026-11-03.Wed, 04 Nov 2026 04:10:10 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: GHSA-85x2-q946-cp5h no longer affects this packagehttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083c-75c1-8a71-694bd3a96118https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083c-75c1-8a71-694bd3a96118GHSA-85x2-q946-cp5h no longer affects this package. Compared against 2026-11-03.Wed, 04 Nov 2026 04:10:10 GMTsecurityimprovementadvisory.resolved[SECURITY] bpmnkit-cli: GHSA-m943-m63m-w62w no longer affects this packagehttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083c-7b72-83e6-04ed50ddbd5bhttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083c-7b72-83e6-04ed50ddbd5bGHSA-m943-m63m-w62w no longer affects this package. Compared against 2026-11-03.Wed, 04 Nov 2026 04:10:10 GMTsecurityimprovementadvisory.resolved[SECURITY] bpmnkit-cli: GHSA-8c8m-p3m8-cjg8 no longer affects this packagehttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083d-7217-85e4-9739f433c779https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a1a4c0-083d-7217-85e4-9739f433c779GHSA-8c8m-p3m8-cjg8 no longer affects this package. Compared against 2026-11-03.Wed, 04 Nov 2026 04:10:10 GMTsecurityimprovementadvisory.resolved[SECURITY] bpmnkit-cli: CVE-2026-110872 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a180b1-c64d-7335-8c88-c081cca679dehttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a180b1-c64d-7335-8c88-c081cca679deCVE-2026-110872 affects this package (high). Compared against 2026-10-27.Wed, 28 Oct 2026 04:08:16 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: CVE-2026-110870 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a180b1-c64f-7651-8a25-d6a67f06052ahttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a180b1-c64f-7651-8a25-d6a67f06052aCVE-2026-110870 affects this package (high). Compared against 2026-10-27.Wed, 28 Oct 2026 04:08:16 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: CVE-2026-110869 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a180b1-c64f-7cb6-aa89-78b56e871de6https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a180b1-c64f-7cb6-aa89-78b56e871de6CVE-2026-110869 affects this package (high). Compared against 2026-10-27.Wed, 28 Oct 2026 04:08:16 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: GHSA-8c8m-p3m8-cjg8 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a16c19-3b49-73bd-aa0c-d7a638f9d569https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a16c19-3b49-73bd-aa0c-d7a638f9d569GHSA-8c8m-p3m8-cjg8 affects this package (high). Compared against 2026-10-23.Sat, 24 Oct 2026 04:09:15 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: GHSA-85x2-q946-cp5h affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a16c19-3b4a-7565-955e-4490aa19ca0chttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a16c19-3b4a-7565-955e-4490aa19ca0cGHSA-85x2-q946-cp5h affects this package (high). Compared against 2026-10-23.Sat, 24 Oct 2026 04:09:15 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: GHSA-m943-m63m-w62w affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a16c19-3b4a-7a96-b54e-dcc9c680bff1https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a16c19-3b4a-7a96-b54e-dcc9c680bff1GHSA-m943-m63m-w62w affects this package (high). Compared against 2026-10-23.Sat, 24 Oct 2026 04:09:15 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: CVE-2026-110871 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a166f3-366f-737b-90d2-a083277d5b00https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a166f3-366f-737b-90d2-a083277d5b00CVE-2026-110871 affects this package (high). Compared against 2026-10-22.Fri, 23 Oct 2026 04:09:37 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no schema to compare.)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a13b6c-5482-7d3d-9d84-6b1e80a815dahttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a13b6c-5482-7d3d-9d84-6b1e80a815daStability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no schema to compare.). Compared against 2026-10-13.Wed, 14 Oct 2026 17:18:37 GMTsecurityneutralcheck.reason[SECURITY] bpmnkit-cli: Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no tool text to scan.)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a13b6c-5483-79a8-b7fe-d64771bd2810https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a13b6c-5483-79a8-b7fe-d64771bd2810Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no tool text to scan.). Compared against 2026-10-13.Wed, 14 Oct 2026 17:18:37 GMTsecurityneutralcheck.reason[SECURITY] bpmnkit-cli: The attested source repository moved (bpmnkit/monorepo → bpmnkit/bpmnkit)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a12171-0ee5-717d-9bfd-7b6de34802d8https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a12171-0ee5-717d-9bfd-7b6de34802d8The attested source repository moved (bpmnkit/monorepo → bpmnkit/bpmnkit). Compared against 2026-10-08.Fri, 09 Oct 2026 16:13:38 GMTsecurityneutralprovenance.repo_changed[SECURITY] bpmnkit-cli: Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a118df-9dd1-7c8c-a896-891cb53ac38dhttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a118df-9dd1-7c8c-a896-891cb53ac38dTool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.). Compared against 2026-10-04.Thu, 08 Oct 2026 00:17:48 GMTsecurityneutralcheck.reason[SECURITY] bpmnkit-cli: Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a118df-9e32-798c-9b44-b4b8d0cc9dachttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a118df-9e32-798c-9b44-b4b8d0cc9dacStability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.). Compared against 2026-10-04.Thu, 08 Oct 2026 00:17:48 GMTsecurityneutralcheck.reason[SECURITY] bpmnkit-cli: Malware scan (unverified → pass)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0faeb-ed5b-79b1-965f-cbbb887cafcdhttps://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0faeb-ed5b-79b1-965f-cbbb887cafcdMalware scan (unverified → pass). Compared against 2026-10-01.Fri, 02 Oct 2026 04:42:40 GMTsecurityimprovementcheck.reverified[SECURITY] bpmnkit-cli: Malware scan (pass → unverified)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0f8cd-f668-7ce4-aac3-2909d02e0a09https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0f8cd-f668-7ce4-aac3-2909d02e0a09Malware scan (pass → unverified). Compared against 2026-09-30.Thu, 01 Oct 2026 18:50:42 GMTsecurityregressioncheck.unverifiable[SECURITY] bpmnkit-cli: CVE-2026-100700 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0f09e-e6bc-7644-ab97-dee071cf4954https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0f09e-e6bc-7644-ab97-dee071cf4954CVE-2026-100700 affects this package (high). Compared against 2026-09-29.Wed, 30 Sep 2026 04:42:20 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: CVE-2026-100702 affects this package (high)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0f09e-e6bc-7d40-b92b-75f773ccc457https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0f09e-e6bc-7d40-b92b-75f773ccc457CVE-2026-100702 affects this package (high). Compared against 2026-09-29.Wed, 30 Sep 2026 04:42:20 GMTsecurityregressionadvisory.identified[SECURITY] bpmnkit-cli: Malware scan (unverified → pass)https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0f09e-e6bf-741c-a4e1-be5edfa7c962https://verifymcp.io/servers/bpmnkit-bpmnkit/bpmnkit-cli#chg-chg_01a0f09e-e6bf-741c-a4e1-be5edfa7c962Malware scan (unverified → pass). Compared against 2026-09-29.Wed, 30 Sep 2026 04:42:20 GMTsecurityimprovementcheck.reverified