{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "brunovicco-mcp-server-auth-template",
  "component": "ghcr-io-brunovicco-mcp-server-auth-template-v0-7-0",
  "generated_at": "2026-11-06T11:15:22.642Z",
  "tracking_since": "2026-09-23",
  "counts": {
    "critical": 4,
    "security": 3,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a15cd9-511e-7862-90f5-a140dcf76f95",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-6q48-6c7w-9gw2",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "none",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "GHSA-6q48-6c7w-9gw2",
        "severity": "none"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 05:05:08.35373+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "GHSA-6q48-6c7w-9gw2 affects this package (none)",
      "link": "https://verifymcp.io/servers/brunovicco-mcp-server-auth-template/ghcr-io-brunovicco-mcp-server-auth-template-v0-7-0#chg-chg_01a15cd9-511e-7862-90f5-a140dcf76f95"
    },
    {
      "id": "chg_01a0f0d4-2519-7480-8471-8bf5dcb49d46",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-09-30",
      "occurred_at": "2026-09-30 05:40:29.930922+00",
      "observed_since": "2026-09-29",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/brunovicco-mcp-server-auth-template/ghcr-io-brunovicco-mcp-server-auth-template-v0-7-0#chg-chg_01a0f0d4-2519-7480-8471-8bf5dcb49d46"
    },
    {
      "id": "chg_01a0f0d4-2512-72a1-adde-f7497a9040ba",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-102268",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "none",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-102268",
        "severity": "none"
      },
      "occurred_on": "2026-09-30",
      "occurred_at": "2026-09-30 05:40:29.930922+00",
      "observed_since": "2026-09-29",
      "source": "scan",
      "summary": "CVE-2026-102268 affects this package (none)",
      "link": "https://verifymcp.io/servers/brunovicco-mcp-server-auth-template/ghcr-io-brunovicco-mcp-server-auth-template-v0-7-0#chg-chg_01a0f0d4-2512-72a1-adde-f7497a9040ba"
    },
    {
      "id": "chg_01a0f0d4-2513-764a-8779-fdcba943739d",
      "kind": "check.reason",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.critical_no_fix",
      "to_code": "cve.unpatched_critical",
      "from_value": "fail",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "path": "bsdutils",
        "refs": "[\"CVE-2026-102268\"]",
        "seen": "2928",
        "direct": "38",
        "package": "util-linux",
        "version": "2.41.5-0+deb13u1",
        "assessed": "140",
        "resolved": "140",
        "severity": "none",
        "unresolved": "2788",
        "vulnerable": "[{\"name\":\"apt\",\"version\":\"3.0.3\",\"depth\":1,\"path\":[\"apt\"],\"refs\":[\"CVE-2011-3374\"]},{\"name\":\"util-linux\",\"version\":\"2.41.5-0+deb13u1\",\"depth\":1,\"path\":[\"bsdutils\"],\"refs\":[\"CVE-2022-0563\",\"CVE-2026-3184\",\"CVE-2026-76642\",\"CVE-2026-78408\",\"CVE-2026-78409\",\"CVE-2026-78410\"]},{\"name\":\"coreutils\",\"version\":\"9.7-3\",\"depth\":1,\"path\":[\"coreutils\"],\"refs\":[\"CVE-2017-18018\",\"CVE-2025-5278\",\"CVE-2026-56391\",\"CVE-2026-56392\"]},{\"name\":\"diffutils\",\"version\":\"1:3.10-4\",\"depth\":1,\"path\":[\"diffutils\"],\"refs\":[\"CVE-2026-53",
        "no_fix_refs": "[\"CVE-2011-3374\",\"CVE-2022-0563\",\"CVE-2026-3184\",\"CVE-2026-78408\",\"CVE-2026-78409\",\"CVE-2026-78410\",\"CVE-2017-18018\",\"CVE-2025-5278\",\"CVE-2026-56391\",\"CVE-2026-56392\",\"CVE-2011-3374\",\"CVE-2022-0563\",\"CVE-2026-3184\",\"CVE-2026-78408\",\"CVE-2026-78409\",\"CVE-2026-78410\",\"CVE-2018-20796\",\"CVE-2019-1010022\",\"CVE-2019-1010023\",\"CVE-2019-1010024\",\"CVE-2019-1010025\",\"CVE-2019-9192\",\"CVE-2026-18374\",\"CVE-2026-19499\",\"CVE-2026-19542\",\"CVE-2026-5435\",\"CVE-2026-6238\",\"CVE-2026-77117\",\"CVE-2026-80489\",\"CVE-2026-8674\",\"CVE",
        "sbom_signer": "https://github.com/brunovicco/mcp-server-auth-template/.github/workflows/release-artifacts.yml@refs/tags/v0.7.0",
        "tree_source": "sbom",
        "tree_status": "partial",
        "sbom_verified": "true"
      },
      "occurred_on": "2026-09-30",
      "occurred_at": "2026-09-30 05:40:29.930922+00",
      "observed_since": "2026-09-29",
      "source": "scan",
      "summary": "Known CVEs (CVE check failed: an unpatched critical CVE affects this package; the score is capped at 0.)",
      "link": "https://verifymcp.io/servers/brunovicco-mcp-server-auth-template/ghcr-io-brunovicco-mcp-server-auth-template-v0-7-0#chg-chg_01a0f0d4-2513-764a-8779-fdcba943739d"
    },
    {
      "id": "chg_01a0f0d4-2518-76ac-b1e4-d342ca249be1",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2019-1010022",
      "subject_child": "",
      "from_code": "cve.critical_no_fix",
      "to_code": "cve.unpatched_critical",
      "from_value": "none",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2019-1010022"
      },
      "occurred_on": "2026-09-30",
      "occurred_at": "2026-09-30 05:40:29.930922+00",
      "observed_since": "2026-09-29",
      "source": "scan",
      "summary": "CVE-2019-1010022 no longer affects this package",
      "link": "https://verifymcp.io/servers/brunovicco-mcp-server-auth-template/ghcr-io-brunovicco-mcp-server-auth-template-v0-7-0#chg-chg_01a0f0d4-2518-76ac-b1e4-d342ca249be1"
    },
    {
      "id": "chg_01a0d70d-ef52-7752-848f-5c479c09dada",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "brunovicco/mcp-server-auth-template",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "brunovicco/mcp-server-auth-template",
        "from": ""
      },
      "occurred_on": "2026-09-25",
      "occurred_at": "2026-09-25 05:33:29.64063+00",
      "observed_since": "2026-09-24",
      "source": "scan",
      "summary": "The attested source repository moved (brunovicco/mcp-server-auth-template)",
      "link": "https://verifymcp.io/servers/brunovicco-mcp-server-auth-template/ghcr-io-brunovicco-mcp-server-auth-template-v0-7-0#chg-chg_01a0d70d-ef52-7752-848f-5c479c09dada"
    },
    {
      "id": "chg_01a0d70d-ef50-74e6-9f57-bce6050e0176",
      "kind": "check.verdict",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "brunovicco/mcp-server-auth-template"
      },
      "occurred_on": "2026-09-25",
      "occurred_at": "2026-09-25 05:33:29.64063+00",
      "observed_since": "2026-09-24",
      "source": "scan",
      "summary": "Provenance (fail → pass)",
      "link": "https://verifymcp.io/servers/brunovicco-mcp-server-auth-template/ghcr-io-brunovicco-mcp-server-auth-template-v0-7-0#chg-chg_01a0d70d-ef50-74e6-9f57-bce6050e0176"
    }
  ],
  "days": [
    {
      "date": "2026-10-21",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-30",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 4
    },
    {
      "date": "2026-09-28",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-25",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-09-23",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}