{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "grafana-mcp-grafana",
  "component": "docker-io-grafana-mcp-grafana",
  "generated_at": "2026-11-05T11:17:45.673Z",
  "tracking_since": "2026-09-28",
  "counts": {
    "critical": 0,
    "security": 10,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a19c7d-4e37-76e4-b183-925ffac1ed78",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-45853",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.critical_no_fix",
      "from_value": null,
      "to_value": "none",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-45853",
        "severity": "none"
      },
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 13:40:20.112096+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "CVE-2023-45853 affects this package (none)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a19c7d-4e37-76e4-b183-925ffac1ed78"
    },
    {
      "id": "chg_01a19c7d-4e3b-741f-ae65-0ede95e0f98b",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2019-1010022",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.critical_no_fix",
      "from_value": null,
      "to_value": "none",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2019-1010022",
        "severity": "none"
      },
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 13:40:20.112096+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "CVE-2019-1010022 affects this package (none)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a19c7d-4e3b-741f-ae65-0ede95e0f98b"
    },
    {
      "id": "chg_01a19c7d-4e3c-70b2-8291-14c1c311d5a1",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.critical_no_fix",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "diffutils",
        "refs": "[\"CVE-2019-1010022\",\"CVE-2026-5450\",\"CVE-2019-1010022\",\"CVE-2026-5450\",\"CVE-2023-45853\"]",
        "seen": "285",
        "direct": "44",
        "package": "diffutils",
        "version": "1:3.8-4",
        "assessed": "284",
        "resolved": "284",
        "severity": "none",
        "unresolved": "1",
        "vulnerable": "[{\"name\":\"apt\",\"version\":\"2.6.1\",\"depth\":1,\"path\":[\"apt\"],\"refs\":[\"CVE-2011-3374\"]},{\"name\":\"util-linux\",\"version\":\"2.38.1-5+deb12u3\",\"depth\":1,\"path\":[\"bsdutils\"],\"refs\":[\"CVE-2022-0563\",\"CVE-2025-14104\",\"CVE-2026-13595\",\"CVE-2026-27456\",\"CVE-2026-3184\",\"CVE-2026-53613\",\"CVE-2026-53615\",\"CVE-2026-78410\"]},{\"name\":\"coreutils\",\"version\":\"9.1-1\",\"depth\":1,\"path\":[\"coreutils\"],\"refs\":[\"CVE-2016-2781\",\"CVE-2017-18018\",\"CVE-2025-5278\",\"CVE-2026-56391\",\"CVE-2026-56392\"]},{\"name\":\"dash\",\"version\":\"0.5.12-2\",\"depth",
        "no_fix_refs": "[\"CVE-2011-3374\",\"CVE-2022-0563\",\"CVE-2025-14104\",\"CVE-2026-13595\",\"CVE-2026-27456\",\"CVE-2026-3184\",\"CVE-2026-53613\",\"CVE-2026-53615\",\"CVE-2026-78410\",\"CVE-2016-2781\",\"CVE-2017-18018\",\"CVE-2025-5278\",\"CVE-2026-56391\",\"CVE-2026-56392\",\"CVE-2026-102473\",\"CVE-2026-102474\",\"CVE-2022-27943\",\"CVE-2026-102010\",\"CVE-2026-114690\",\"CVE-2026-114691\",\"CVE-2026-115455\",\"CVE-2026-95619\",\"CVE-2022-3219\",\"CVE-2025-30258\",\"CVE-2025-68972\",\"CVE-2026-105712\",\"CVE-2026-57062\",\"CVE-2026-41991\",\"CVE-2026-41992\",\"CVE-2011-3374\",\"",
        "sbom_signer": "https://github.com/grafana/mcp-grafana/.github/workflows/docker.yml@refs/tags/v2.2.0",
        "tree_source": "sbom",
        "tree_status": "partial",
        "sbom_verified": "true"
      },
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 13:40:20.112096+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a19c7d-4e3c-70b2-8291-14c1c311d5a1"
    },
    {
      "id": "chg_01a19c7d-4e3c-77bb-8025-ce0a66c732b0",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-5450",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.critical_no_fix",
      "from_value": null,
      "to_value": "none",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-5450",
        "severity": "none"
      },
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 13:40:20.112096+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "CVE-2026-5450 affects this package (none)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a19c7d-4e3c-77bb-8025-ce0a66c732b0"
    },
    {
      "id": "chg_01a13bc8-8332-719f-9daf-4c2835b54bdc",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 18:59:18.947456+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a13bc8-8332-719f-9daf-4c2835b54bdc"
    },
    {
      "id": "chg_01a13bc8-8333-76cd-989d-c09decfec666",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 18:59:18.947456+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a13bc8-8333-76cd-989d-c09decfec666"
    },
    {
      "id": "chg_01a133a6-5b9a-7275-9877-6586510b7d28",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-13",
      "occurred_at": "2026-10-13 05:05:02.824534+00",
      "observed_since": "2026-10-12",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a133a6-5b9a-7275-9877-6586510b7d28"
    },
    {
      "id": "chg_01a13168-5f1c-7174-bbf4-4541871fffa6",
      "kind": "check.unverifiable",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "provenance_deferred"
      },
      "occurred_on": "2026-10-12",
      "occurred_at": "2026-10-12 18:38:06.070584+00",
      "observed_since": "2026-10-10",
      "source": "scan",
      "summary": "Provenance (fail → unverified)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a13168-5f1c-7174-bbf4-4541871fffa6"
    },
    {
      "id": "chg_01a11832-7f02-76e7-9411-dbc8390af019",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-07",
      "occurred_at": "2026-10-07 21:08:38.737908+00",
      "observed_since": "2026-10-06",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a11832-7f02-76e7-9411-dbc8390af019"
    },
    {
      "id": "chg_01a11832-7f66-787c-97f7-0c3c57f87c7e",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-07",
      "occurred_at": "2026-10-07 21:08:38.737908+00",
      "observed_since": "2026-10-06",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/grafana-mcp-grafana/docker-io-grafana-mcp-grafana#chg-chg_01a11832-7f66-787c-97f7-0c3c57f87c7e"
    }
  ],
  "days": [
    {
      "date": "2026-11-02",
      "total": 9,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-10-20",
      "total": 9,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-14",
      "total": 9,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-10-13",
      "total": 9,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-10-12",
      "total": 9,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-07",
      "total": 9,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-10-01",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-30",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}