{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "endurancetools-garmin-mcp",
  "component": "garmin-mcp-server",
  "generated_at": "2026-10-24T07:27:57.221Z",
  "tracking_since": "2026-10-12",
  "counts": {
    "critical": 0,
    "security": 20,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a143f4-6b9e-7b90-8f27-46f055a75184",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.03",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-16",
      "occurred_at": "2026-10-16 09:04:14.039499+00",
      "observed_since": "2026-10-15",
      "source": "scan",
      "summary": "Stability (0.03 → unverified)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a143f4-6b9e-7b90-8f27-46f055a75184"
    },
    {
      "id": "chg_01a143f4-6ba2-74b4-b078-e063c1b8db26",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-16",
      "occurred_at": "2026-10-16 09:04:14.039499+00",
      "observed_since": "2026-10-15",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a143f4-6ba2-74b4-b078-e063c1b8db26"
    },
    {
      "id": "chg_01a1434e-ca77-7069-9fe3-82f0ad0d1bb2",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-16",
      "occurred_at": "2026-10-16 06:03:16.749281+00",
      "observed_since": "2026-10-15",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a1434e-ca77-7069-9fe3-82f0ad0d1bb2"
    },
    {
      "id": "chg_01a1416e-d5d3-77f3-b41b-dad023358c03",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-10-15",
      "occurred_at": "2026-10-15 21:19:05.153385+00",
      "observed_since": "2026-10-14",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a1416e-d5d3-77f3-b41b-dad023358c03"
    },
    {
      "id": "chg_01a13cc7-2ff7-73da-975d-6c9a9c547df1",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 23:37:29.158514+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a13cc7-2ff7-73da-975d-6c9a9c547df1"
    },
    {
      "id": "chg_01a13cc7-2ff8-7f27-b9bc-05158c6f0b9b",
      "kind": "check.appeared",
      "family": "tool-safety-manipulation",
      "subject_kind": "check",
      "subject": "tool-safety-manipulation",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.manipulation_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "units": "22",
        "judged": "22"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 23:37:29.158514+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "First check of Judged manipulation (pass)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a13cc7-2ff8-7f27-b9bc-05158c6f0b9b"
    },
    {
      "id": "chg_01a13cc7-2ff9-7834-9fa8-6f9b0f85f454",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 23:37:29.158514+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a13cc7-2ff9-7834-9fa8-6f9b0f85f454"
    },
    {
      "id": "chg_01a133da-6378-727f-bf08-04387d0ab89c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-59871",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-59871",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-59871 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-6378-727f-bf08-04387d0ab89c"
    },
    {
      "id": "chg_01a133da-6378-7b78-be61-acaab1795a4b",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-53655",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-53655",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-53655 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-6378-7b78-be61-acaab1795a4b"
    },
    {
      "id": "chg_01a133da-6379-7940-9fa0-03e5d3459d0c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-59873",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-59873",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-59873 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-6379-7940-9fa0-03e5d3459d0c"
    },
    {
      "id": "chg_01a133da-637a-71a1-95a1-be031aeb7b47",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-24842",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-24842",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-24842 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637a-71a1-95a1-be031aeb7b47"
    },
    {
      "id": "chg_01a133da-637a-7a42-a906-18ffeaf63d39",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-29786",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-29786",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-29786 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637a-7a42-a906-18ffeaf63d39"
    },
    {
      "id": "chg_01a133da-637b-7666-a11e-48bd315cc1a6",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-23950",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-23950",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-23950 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637b-7666-a11e-48bd315cc1a6"
    },
    {
      "id": "chg_01a133da-637b-7b43-8a8c-e5c0d1765c23",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-73566",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-73566",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-73566 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637b-7b43-8a8c-e5c0d1765c23"
    },
    {
      "id": "chg_01a133da-637c-7647-ae66-c0070c78f525",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-59874",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-59874",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-59874 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637c-7647-ae66-c0070c78f525"
    },
    {
      "id": "chg_01a133da-637c-7c2a-a60a-8fe68548723c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-59875",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-59875",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-59875 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637c-7c2a-a60a-8fe68548723c"
    },
    {
      "id": "chg_01a133da-637d-7747-a0df-784650ace377",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-26960",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-26960",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-26960 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637d-7747-a0df-784650ace377"
    },
    {
      "id": "chg_01a133da-637e-7113-9fa1-b7aa56e07ed2",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "garmin-mcp-auth > cuimp > tar",
        "refs": "[\"CVE-2026-59873\",\"CVE-2026-24842\",\"CVE-2026-26960\",\"CVE-2026-23745\",\"CVE-2026-59874\",\"CVE-2026-31802\",\"CVE-2026-59875\",\"CVE-2026-29786\",\"CVE-2026-73566\",\"CVE-2026-23950\",\"CVE-2026-53655\",\"CVE-2026-59871\"]",
        "seen": "37",
        "package": "tar",
        "version": "7.4.3",
        "assessed": "38",
        "resolved": "37",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"tar\",\"version\":\"7.4.3\",\"depth\":3,\"path\":[\"garmin-mcp-auth\",\"cuimp\",\"tar\"],\"refs\":[\"CVE-2026-59873\",\"CVE-2026-24842\",\"CVE-2026-26960\",\"CVE-2026-23745\",\"CVE-2026-59874\",\"CVE-2026-31802\",\"CVE-2026-59875\",\"CVE-2026-29786\",\"CVE-2026-73566\",\"CVE-2026-23950\",\"CVE-2026-53655\",\"CVE-2026-59871\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637e-7113-9fa1-b7aa56e07ed2"
    },
    {
      "id": "chg_01a133da-637e-78e5-b6ab-7288c611a2e4",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-23745",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-23745",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-23745 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637e-78e5-b6ab-7288c611a2e4"
    },
    {
      "id": "chg_01a133da-637f-7717-a31b-59b9d8b7d088",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-31802",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-31802",
        "severity": "high"
      },
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 06:01:52.732189+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "CVE-2026-31802 affects this package (high)",
      "link": "https://verifymcp.io/servers/endurancetools-garmin-mcp/garmin-mcp-server#chg-chg_01a133da-637f-7717-a31b-59b9d8b7d088"
    }
  ],
  "days": [
    {
      "date": "2026-10-22",
      "total": 71,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 23,
        "to": 27,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 7,
          "to_days": 8
        },
        "partial": false,
        "compared_to": "2026-10-21",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-20",
      "total": 70,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 17,
        "to": 20,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 5,
          "to_days": 6
        },
        "partial": false,
        "compared_to": "2026-10-19",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-18",
      "total": 69,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 10,
        "to": 13,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 3,
          "to_days": 4
        },
        "partial": false,
        "compared_to": "2026-10-17",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-16",
      "total": 68,
      "delta": 16,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-10-15",
      "total": 52,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-14",
      "total": 67,
      "delta": 31,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 14
    },
    {
      "date": "2026-10-13",
      "total": 36,
      "delta": 8,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 15
    },
    {
      "date": "2026-10-12",
      "total": 28,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}