{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "meltingpixelsai-harvey-budget",
  "component": "meltingpixels-harvey-budget",
  "generated_at": "2026-09-25T08:16:20.570Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 35,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0a271-641d-7722-8c1d-35fd586ce678",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67316",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67316"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67316 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-641d-7722-8c1d-35fd586ce678"
    },
    {
      "id": "chg_01a0a271-641e-7810-ac40-f9fa043b8ef8",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67313",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67313"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67313 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-641e-7810-ac40-f9fa043b8ef8"
    },
    {
      "id": "chg_01a0a271-641e-7c52-bada-e6090167778f",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67312",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67312"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67312 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-641e-7c52-bada-e6090167778f"
    },
    {
      "id": "chg_01a0a271-641f-739c-bea8-0e2db7fd0444",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67321",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67321"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67321 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-641f-739c-bea8-0e2db7fd0444"
    },
    {
      "id": "chg_01a0a271-641f-7f03-a007-6914af873d99",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67315",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67315"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67315 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-641f-7f03-a007-6914af873d99"
    },
    {
      "id": "chg_01a0a271-6420-7984-aa2f-e06d7b1322f6",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67320",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67320"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67320 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-6420-7984-aa2f-e06d7b1322f6"
    },
    {
      "id": "chg_01a0a271-6421-73c9-b59f-b3ff851313a3",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67317",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67317"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67317 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-6421-73c9-b59f-b3ff851313a3"
    },
    {
      "id": "chg_01a0a271-6421-7ace-a947-369a11cf13e7",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67318",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67318"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67318 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-6421-7ace-a947-369a11cf13e7"
    },
    {
      "id": "chg_01a0a271-6422-7e47-a2d4-3e4793a6bd34",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67319",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67319"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67319 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-6422-7e47-a2d4-3e4793a6bd34"
    },
    {
      "id": "chg_01a0a271-6424-715f-b2e2-d1d31cfdabeb",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67314",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.transitive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67314"
      },
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 00:22:15.279996+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "CVE-2026-67314 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_01a0a271-6424-715f-b2e2-d1d31cfdabeb"
    },
    {
      "id": "chg_019ff874-4efc-710f-84d8-c2ba16e9ce6e",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-frvp-7c67-39w9",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.transitive",
      "from_value": "medium",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "GHSA-frvp-7c67-39w9"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 00:09:59.767749+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "GHSA-frvp-7c67-39w9 no longer affects this package",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019ff874-4efc-710f-84d8-c2ba16e9ce6e"
    },
    {
      "id": "chg_019ff874-4efd-729d-b43a-7f41f0100934",
      "kind": "check.reason",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.transitive",
      "from_value": "fail",
      "to_value": "fail",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "path": "mcpay > @modelcontextprotocol/sdk",
        "refs": "[\"CVE-2026-25536\",\"CVE-2026-0621\",\"CVE-2025-66414\",\"CVE-2026-67313\",\"CVE-2026-67319\",\"CVE-2026-67315\",\"CVE-2026-67320\",\"CVE-2026-67321\",\"CVE-2026-67317\",\"CVE-2026-67316\",\"CVE-2026-67318\",\"CVE-2026-67312\",\"CVE-2026-67314\",\"GHSA-w2fm-25vw-vh7f\",\"CVE-2026-41907\",\"CVE-2026-41907\",\"CVE-2026-45736\",\"CVE-2026-48779\"]",
        "seen": "697",
        "package": "@modelcontextprotocol/sdk",
        "version": "1.18.2",
        "assessed": "401",
        "resolved": "400",
        "severity": "high",
        "transitive": "6",
        "unresolved": "297",
        "vulnerable": "[{\"name\":\"@modelcontextprotocol/sdk\",\"version\":\"1.18.2\",\"depth\":2,\"path\":[\"mcpay\",\"@modelcontextprotocol/sdk\"],\"refs\":[\"CVE-2026-25536\",\"CVE-2026-0621\",\"CVE-2025-66414\"]},{\"name\":\"axios\",\"version\":\"1.16.0\",\"depth\":6,\"path\":[\"x402\",\"wagmi\",\"@wagmi/connectors\",\"@base-org/account\",\"@coinbase/cdp-sdk\",\"axios\"],\"refs\":[\"CVE-2026-67313\",\"CVE-2026-67319\",\"CVE-2026-67315\",\"CVE-2026-67320\",\"CVE-2026-67321\",\"CVE-2026-67317\",\"CVE-2026-67316\",\"CVE-2026-67318\",\"CVE-2026-67312\",\"CVE-2026-67314\"]},{\"name\":\"mcp-handler\",\"v",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 00:09:59.767749+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Known CVEs (CVE check failed: a known high-severity CVE affects @modelcontextprotocol/sdk 1.18.2, reached via mcpay > @modelcontextprotocol/sdk. A fixed version is available.)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019ff874-4efd-729d-b43a-7f41f0100934"
    },
    {
      "id": "chg_019fc463-d4ed-7613-846a-3c618d2b993a",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67315",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67315",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67315 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4ed-7613-846a-3c618d2b993a"
    },
    {
      "id": "chg_019fc463-d4f0-70db-837f-297806a9c261",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-48779",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-48779",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-48779 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f0-70db-837f-297806a9c261"
    },
    {
      "id": "chg_019fc463-d4f0-7845-bb78-c08a46195e39",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67318",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67318",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67318 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f0-7845-bb78-c08a46195e39"
    },
    {
      "id": "chg_019fc463-d4f1-7cac-ad56-93e3c5b42fca",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67314",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67314",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67314 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f1-7cac-ad56-93e3c5b42fca"
    },
    {
      "id": "chg_019fc463-d4f3-703a-8e35-ae32ba665f5b",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67313",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67313",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67313 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f3-703a-8e35-ae32ba665f5b"
    },
    {
      "id": "chg_019fc463-d4f3-7a18-befe-0bfd37c7b6e3",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67317",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67317",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67317 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f3-7a18-befe-0bfd37c7b6e3"
    },
    {
      "id": "chg_019fc463-d4f4-7210-9c3a-c3d19155871f",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67312",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67312",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67312 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f4-7210-9c3a-c3d19155871f"
    },
    {
      "id": "chg_019fc463-d4f4-7802-ba54-a4861e9d279f",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-frvp-7c67-39w9",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "GHSA-frvp-7c67-39w9",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "GHSA-frvp-7c67-39w9 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f4-7802-ba54-a4861e9d279f"
    },
    {
      "id": "chg_019fc463-d4f4-7d04-a0fd-01575178e8b0",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "GHSA-w2fm-25vw-vh7f",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "GHSA-w2fm-25vw-vh7f",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "GHSA-w2fm-25vw-vh7f affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f4-7d04-a0fd-01575178e8b0"
    },
    {
      "id": "chg_019fc463-d4f5-7265-a85e-f5fc69b63e82",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f5-7265-a85e-f5fc69b63e82"
    },
    {
      "id": "chg_019fc463-d4f5-76f3-a5b1-d74866dd071b",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67319",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67319",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67319 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f5-76f3-a5b1-d74866dd071b"
    },
    {
      "id": "chg_019fc463-d4f5-7b6a-af0a-5289311ae693",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-25536",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-25536",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-25536 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f5-7b6a-af0a-5289311ae693"
    },
    {
      "id": "chg_019fc463-d4f6-7018-8649-9a184e15a0c5",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-45736",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-45736",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-45736 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f6-7018-8649-9a184e15a0c5"
    },
    {
      "id": "chg_019fc463-d4f6-7592-8ad2-5903d69e5c3e",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67321",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67321",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67321 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f6-7592-8ad2-5903d69e5c3e"
    },
    {
      "id": "chg_019fc463-d4f6-7bb4-8f50-f8bda2577f2d",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@hono/node-server",
        "refs": "[\"GHSA-frvp-7c67-39w9\",\"CVE-2026-25536\",\"CVE-2026-0621\",\"CVE-2025-66414\",\"CVE-2026-67313\",\"CVE-2026-67319\",\"CVE-2026-67315\",\"CVE-2026-67320\",\"CVE-2026-67321\",\"CVE-2026-67317\",\"CVE-2026-67316\",\"CVE-2026-67318\",\"CVE-2026-67312\",\"CVE-2026-67314\",\"GHSA-w2fm-25vw-vh7f\",\"CVE-2026-41907\",\"CVE-2026-45736\",\"CVE-2026-48779\"]",
        "seen": "450",
        "direct": "1",
        "package": "@hono/node-server",
        "version": "1.19.17",
        "assessed": "251",
        "resolved": "250",
        "severity": "medium",
        "transitive": "5",
        "unresolved": "200",
        "vulnerable": "[{\"name\":\"@hono/node-server\",\"version\":\"1.19.17\",\"depth\":1,\"path\":[\"@hono/node-server\"],\"refs\":[\"GHSA-frvp-7c67-39w9\"]},{\"name\":\"@modelcontextprotocol/sdk\",\"version\":\"1.18.2\",\"depth\":2,\"path\":[\"mcpay\",\"@modelcontextprotocol/sdk\"],\"refs\":[\"CVE-2026-25536\",\"CVE-2026-0621\",\"CVE-2025-66414\"]},{\"name\":\"axios\",\"version\":\"1.16.0\",\"depth\":6,\"path\":[\"x402\",\"wagmi\",\"@wagmi/connectors\",\"@base-org/account\",\"@coinbase/cdp-sdk\",\"axios\"],\"refs\":[\"CVE-2026-67313\",\"CVE-2026-67319\",\"CVE-2026-67315\",\"CVE-2026-67320\",\"CVE-2026",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f6-7bb4-8f50-f8bda2577f2d"
    },
    {
      "id": "chg_019fc463-d4f7-7300-8f0f-50d96c483099",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67320",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67320",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67320 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f7-7300-8f0f-50d96c483099"
    },
    {
      "id": "chg_019fc463-d4f7-7e24-910c-b8ef641dc377",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2025-66414",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2025-66414",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2025-66414 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f7-7e24-910c-b8ef641dc377"
    },
    {
      "id": "chg_019fc463-d4f8-7365-8439-aa8c9ba191a7",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-0621",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-0621",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-0621 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f8-7365-8439-aa8c9ba191a7"
    },
    {
      "id": "chg_019fc463-d4f8-7b53-9322-fcd9d7c0d923",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-67316",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-67316",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-67316 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4f8-7b53-9322-fcd9d7c0d923"
    },
    {
      "id": "chg_019fc463-d4fa-7b14-bfce-c03a5702aeb4",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-41907",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "medium",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-41907",
        "severity": "medium"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-41907 affects this package (medium)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d4fa-7b14-bfce-c03a5702aeb4"
    },
    {
      "id": "chg_019fc463-d501-7785-a46e-8ec45216359a",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "tier": "none"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:31:44.696102+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fc463-d501-7785-a46e-8ec45216359a"
    },
    {
      "id": "chg_019fbfee-14cf-79de-b1d1-987f141caa31",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 00:44:38.9195+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fbfee-14cf-79de-b1d1-987f141caa31"
    },
    {
      "id": "chg_019fbfee-14d6-73d2-bd14-d3a5636de5bc",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 00:44:38.9195+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/meltingpixelsai-harvey-budget/meltingpixels-harvey-budget#chg-chg_019fbfee-14d6-73d2-bd14-d3a5636de5bc"
    }
  ],
  "days": [
    {
      "date": "2026-09-25",
      "total": 29,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-15",
      "total": 29,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 10
    },
    {
      "date": "2026-08-26",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-13",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-08-12",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-11",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-02",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 30
    },
    {
      "date": "2026-07-31",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}