{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "chaoscypherinc-chaoscypher",
  "component": "chaoscypher-cli",
  "generated_at": "2026-11-05T09:37:04.311Z",
  "tracking_since": "2026-09-27",
  "counts": {
    "critical": 7,
    "security": 10,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a17fcf-c923-7c78-8f5e-0853c18477cd",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112393",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112393"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 00:01:26.270236+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "CVE-2026-112393 no longer affects this package",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a17fcf-c923-7c78-8f5e-0853c18477cd"
    },
    {
      "id": "chg_01a17fcf-c926-71d6-9f0a-a88cda41ad8f",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-96639",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-96639"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 00:01:26.270236+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "CVE-2026-96639 no longer affects this package",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a17fcf-c926-71d6-9f0a-a88cda41ad8f"
    },
    {
      "id": "chg_01a17fcf-c926-7bbb-82b1-e3ae32fa495a",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112398",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112398"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 00:01:26.270236+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "CVE-2026-112398 no longer affects this package",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a17fcf-c926-7bbb-82b1-e3ae32fa495a"
    },
    {
      "id": "chg_01a17fcf-c927-717e-a7ec-0e3136b3d26d",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112900",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112900"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 00:01:26.270236+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "CVE-2026-112900 no longer affects this package",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a17fcf-c927-717e-a7ec-0e3136b3d26d"
    },
    {
      "id": "chg_01a17fcf-c927-760b-aaef-7615d3da9f98",
      "kind": "check.verdict",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "chaoscypherinc/chaoscypher"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 00:01:26.270236+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "Provenance (fail → pass)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a17fcf-c927-760b-aaef-7615d3da9f98"
    },
    {
      "id": "chg_01a17fcf-c927-7d3f-b768-c04206774f9e",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "181",
        "assessed": "182",
        "resolved": "181",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 00:01:26.270236+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "Known CVEs (fail → pass)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a17fcf-c927-7d3f-b768-c04206774f9e"
    },
    {
      "id": "chg_01a17fcf-c928-743b-9817-c97e1409a952",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112403",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112403"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 00:01:26.270236+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "CVE-2026-112403 no longer affects this package",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a17fcf-c928-743b-9817-c97e1409a952"
    },
    {
      "id": "chg_01a17fcf-c928-7960-b0cd-1dafdd954e14",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "chaoscypherinc/chaoscypher",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "chaoscypherinc/chaoscypher",
        "from": ""
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 00:01:26.270236+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "The attested source repository moved (chaoscypherinc/chaoscypher)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a17fcf-c928-7960-b0cd-1dafdd954e14"
    },
    {
      "id": "chg_01a16d24-7307-7058-ad52-bf504187eaec",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112398",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112398",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 09:01:07.675518+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2026-112398 affects this package (high)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a16d24-7307-7058-ad52-bf504187eaec"
    },
    {
      "id": "chg_01a167fe-95c2-7dbe-a233-7115bb2689b8",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-96639",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-96639",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 09:01:40.139657+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-96639 affects this package (high)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a167fe-95c2-7dbe-a233-7115bb2689b8"
    },
    {
      "id": "chg_01a162da-651c-7a5b-8d22-2f003eb1e2e5",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112393",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112393",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 09:04:02.207517+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-112393 affects this package (high)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a162da-651c-7a5b-8d22-2f003eb1e2e5"
    },
    {
      "id": "chg_01a162da-652c-724a-bc69-0f518f496fa5",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112900",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112900",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 09:04:02.207517+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-112900 affects this package (high)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a162da-652c-724a-bc69-0f518f496fa5"
    },
    {
      "id": "chg_01a15db4-c3fe-7e85-b01c-4f6a37dd45b2",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.unpatched_critical",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "chaoscypher-core > Pillow",
        "refs": "[\"CVE-2026-112403\"]",
        "seen": "182",
        "package": "pillow",
        "version": "12.3.0",
        "assessed": "183",
        "resolved": "182",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"pillow\",\"version\":\"12.3.0\",\"depth\":2,\"path\":[\"chaoscypher-core\",\"Pillow\"],\"refs\":[\"CVE-2026-112395\",\"CVE-2026-112397\",\"CVE-2026-112400\",\"CVE-2026-112403\",\"CVE-2026-112404\",\"CVE-2026-112895\",\"CVE-2026-112896\",\"CVE-2026-112897\",\"CVE-2026-112899\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 09:04:49.081684+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a15db4-c3fe-7e85-b01c-4f6a37dd45b2"
    },
    {
      "id": "chg_01a15db4-c46d-7cb2-9c45-c19c44e2a60d",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-112403",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-112403",
        "severity": "high"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 09:04:49.081684+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "CVE-2026-112403 affects this package (high)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a15db4-c46d-7cb2-9c45-c19c44e2a60d"
    },
    {
      "id": "chg_01a15db4-c5b3-7eda-ba75-9bf7facd87d5",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 09:04:49.081684+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a15db4-c5b3-7eda-ba75-9bf7facd87d5"
    },
    {
      "id": "chg_01a13482-99cd-7211-a82c-2522728ffc74",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "180",
        "assessed": "181",
        "resolved": "180",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 09:05:36.673841+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a13482-99cd-7211-a82c-2522728ffc74"
    },
    {
      "id": "chg_01a131c2-1225-7ebb-8fbd-731cdbe06b10",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "resolver_unavailable"
      },
      "occurred_on": "2026-10-12",
      "occurred_at": "2026-10-12 20:16:04.630268+00",
      "observed_since": "2026-10-04",
      "source": "scan",
      "summary": "Known CVEs (pass → unverified)",
      "link": "https://verifymcp.io/servers/chaoscypherinc-chaoscypher/chaoscypher-cli#chg-chg_01a131c2-1225-7ebb-8fbd-731cdbe06b10"
    }
  ],
  "days": [
    {
      "date": "2026-10-28",
      "total": 50,
      "delta": 50,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 10
    },
    {
      "date": "2026-10-24",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-23",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-22",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-21",
      "total": 0,
      "delta": -40,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-13",
      "total": 40,
      "delta": 11,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-12",
      "total": 29,
      "delta": -11,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-28",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}