{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "fizzl13-paypal-guard",
  "component": "fizzl-paypal-guard-mcp",
  "generated_at": "2026-10-24T07:28:48.080Z",
  "tracking_since": "2026-10-21",
  "counts": {
    "critical": 0,
    "security": 28,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a16c52-7450-72e2-86f9-26d16b7a2801",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-54404",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-54404",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 05:11:45.451643+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2023-54404 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16c52-7450-72e2-86f9-26d16b7a2801"
    },
    {
      "id": "chg_01a1672c-52e8-7d60-95a8-a3ec27fd75d7",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-41907",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-41907",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-41907 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52e8-7d60-95a8-a3ec27fd75d7"
    },
    {
      "id": "chg_01a1672c-52e9-7d35-ab70-e59f4512b882",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-41139",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-41139",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-41139 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52e9-7d35-ab70-e59f4512b882"
    },
    {
      "id": "chg_01a1672c-52ea-740c-8d75-693988dc04ab",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-40897",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-40897",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-40897 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ea-740c-8d75-693988dc04ab"
    },
    {
      "id": "chg_01a1672c-52ea-7b66-81d5-913df1e67761",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2025-9910",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2025-9910",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2025-9910 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ea-7b66-81d5-913df1e67761"
    },
    {
      "id": "chg_01a1672c-52ec-772f-8a07-c3f398a6f448",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-8657",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-8657",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-8657 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ec-772f-8a07-c3f398a6f448"
    },
    {
      "id": "chg_01a1672c-52ec-7dcb-b58e-6c9958eb0922",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-8769",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-8769",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-8769 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ec-7dcb-b58e-6c9958eb0922"
    },
    {
      "id": "chg_01a1672c-52ed-7402-ad71-f166f9eb25e9",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2025-68665",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2025-68665",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2025-68665 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ed-7402-ad71-f166f9eb25e9"
    },
    {
      "id": "chg_01a1672c-52ed-7a54-951a-626c41cc6142",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-40190",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-40190",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-40190 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ed-7a54-951a-626c41cc6142"
    },
    {
      "id": "chg_01a1672c-52ee-7081-8665-468afb70811f",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-45134",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-45134",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-45134 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ee-7081-8665-468afb70811f"
    },
    {
      "id": "chg_01a1672c-52ee-79b0-be3b-b295e706e1ca",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@paypal/agent-toolkit > @langchain/core",
        "refs": "[\"CVE-2026-8769\",\"CVE-2025-68665\",\"CVE-2025-48985\",\"CVE-2025-9910\",\"CVE-2026-8657\",\"CVE-2026-45134\",\"CVE-2026-40190\",\"CVE-2026-41182\",\"CVE-2026-40897\",\"CVE-2026-41139\",\"CVE-2026-41907\"]",
        "seen": "246",
        "package": "@langchain/core",
        "version": "0.3.6",
        "assessed": "247",
        "resolved": "246",
        "severity": "high",
        "transitive": "7",
        "vulnerable": "[{\"name\":\"@ai-sdk/provider-utils\",\"version\":\"2.2.8\",\"depth\":3,\"path\":[\"@paypal/agent-toolkit\",\"ai\",\"@ai-sdk/provider-utils\"],\"refs\":[\"CVE-2026-8769\"]},{\"name\":\"@langchain/core\",\"version\":\"0.3.6\",\"depth\":2,\"path\":[\"@paypal/agent-toolkit\",\"@langchain/core\"],\"refs\":[\"CVE-2025-68665\"]},{\"name\":\"ai\",\"version\":\"4.3.19\",\"depth\":2,\"path\":[\"@paypal/agent-toolkit\",\"ai\"],\"refs\":[\"CVE-2025-48985\"]},{\"name\":\"jsondiffpatch\",\"version\":\"0.6.0\",\"depth\":3,\"path\":[\"@paypal/agent-toolkit\",\"ai\",\"jsondiffpatch\"],\"refs\":[\"CVE-202",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ee-79b0-be3b-b295e706e1ca"
    },
    {
      "id": "chg_01a1672c-52ef-706d-8d96-89c6adbe5da3",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-41182",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-41182",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2026-41182 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ef-706d-8d96-89c6adbe5da3"
    },
    {
      "id": "chg_01a1672c-52ef-7663-b372-5f46c37a02dd",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2025-48985",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2025-48985",
        "severity": "high"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "CVE-2025-48985 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ef-7663-b372-5f46c37a02dd"
    },
    {
      "id": "chg_01a1672c-52ef-7d2e-9d49-ca6c943814b7",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 05:12:00.445973+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1672c-52ef-7d2e-9d49-ca6c943814b7"
    },
    {
      "id": "chg_01a1631c-95d0-7a69-ab45-119874a9d244",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.00",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 10:16:20.148871+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "Stability (0.00 → unverified)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1631c-95d0-7a69-ab45-119874a9d244"
    },
    {
      "id": "chg_01a1631c-95d1-7182-acc5-7ece82eca8c1",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 10:16:20.148871+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a1631c-95d1-7182-acc5-7ece82eca8c1"
    },
    {
      "id": "chg_01a16206-1bc3-7833-8fe6-80ad4a61ea64",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-41907",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-41907",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-41907 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc3-7833-8fe6-80ad4a61ea64"
    },
    {
      "id": "chg_01a16206-1bc4-704c-81d0-fc9f53d1c345",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-41139",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-41139",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-41139 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc4-704c-81d0-fc9f53d1c345"
    },
    {
      "id": "chg_01a16206-1bc4-776c-b356-9dbdfd2983b0",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-40897",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-40897",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-40897 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc4-776c-b356-9dbdfd2983b0"
    },
    {
      "id": "chg_01a16206-1bc4-7d54-905d-995778d0e189",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2025-9910",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2025-9910",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2025-9910 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc4-7d54-905d-995778d0e189"
    },
    {
      "id": "chg_01a16206-1bc5-7376-a051-525c46600605",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-8657",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-8657",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-8657 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc5-7376-a051-525c46600605"
    },
    {
      "id": "chg_01a16206-1bc5-78f9-bd06-66260bcb752d",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-8769",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-8769",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-8769 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc5-78f9-bd06-66260bcb752d"
    },
    {
      "id": "chg_01a16206-1bc5-7e16-b768-315990de5704",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2025-68665",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2025-68665",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2025-68665 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc5-7e16-b768-315990de5704"
    },
    {
      "id": "chg_01a16206-1bc6-73ff-a123-cc672f5bb5f0",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-40190",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-40190",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-40190 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc6-73ff-a123-cc672f5bb5f0"
    },
    {
      "id": "chg_01a16206-1bc6-78bc-9205-b67a011911ed",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-45134",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-45134",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-45134 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc6-78bc-9205-b67a011911ed"
    },
    {
      "id": "chg_01a16206-1bc6-7d8f-a036-4602fc13c609",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@paypal/agent-toolkit > @langchain/core",
        "refs": "[\"CVE-2026-8769\",\"CVE-2025-68665\",\"CVE-2025-48985\",\"CVE-2025-9910\",\"CVE-2026-8657\",\"CVE-2026-45134\",\"CVE-2026-40190\",\"CVE-2026-41182\",\"CVE-2026-40897\",\"CVE-2026-41139\",\"CVE-2026-41907\"]",
        "seen": "246",
        "package": "@langchain/core",
        "version": "0.3.6",
        "assessed": "247",
        "resolved": "246",
        "severity": "high",
        "transitive": "7",
        "vulnerable": "[{\"name\":\"@ai-sdk/provider-utils\",\"version\":\"2.2.8\",\"depth\":3,\"path\":[\"@paypal/agent-toolkit\",\"ai\",\"@ai-sdk/provider-utils\"],\"refs\":[\"CVE-2026-8769\"]},{\"name\":\"@langchain/core\",\"version\":\"0.3.6\",\"depth\":2,\"path\":[\"@paypal/agent-toolkit\",\"@langchain/core\"],\"refs\":[\"CVE-2025-68665\"]},{\"name\":\"ai\",\"version\":\"4.3.19\",\"depth\":2,\"path\":[\"@paypal/agent-toolkit\",\"ai\"],\"refs\":[\"CVE-2025-48985\"]},{\"name\":\"jsondiffpatch\",\"version\":\"0.6.0\",\"depth\":3,\"path\":[\"@paypal/agent-toolkit\",\"ai\",\"jsondiffpatch\"],\"refs\":[\"CVE-202",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc6-7d8f-a036-4602fc13c609"
    },
    {
      "id": "chg_01a16206-1bc7-72c3-963e-4566df51146e",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-41182",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-41182",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2026-41182 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc7-72c3-963e-4566df51146e"
    },
    {
      "id": "chg_01a16206-1bc7-76c6-80ae-da9301f893eb",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2025-48985",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2025-48985",
        "severity": "high"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 05:12:09.786818+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "CVE-2025-48985 affects this package (high)",
      "link": "https://verifymcp.io/servers/fizzl13-paypal-guard/fizzl-paypal-guard-mcp#chg-chg_01a16206-1bc7-76c6-80ae-da9301f893eb"
    }
  ],
  "days": [
    {
      "date": "2026-10-24",
      "total": 76,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-23",
      "total": 76,
      "delta": 38,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 18
    },
    {
      "date": "2026-10-22",
      "total": 38,
      "delta": -29,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 20
    },
    {
      "date": "2026-10-21",
      "total": 67,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}