{
  "server": "pramoddutta-browserbash",
  "component": "browserbash-cli",
  "generated_at": "2026-08-03T20:50:49.658Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 15,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_019fc44e-7f5b-7662-933d-e5e602884850",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-11525",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-11525",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-11525 affects this package (high)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f5b-7662-933d-e5e602884850"
    },
    {
      "id": "chg_019fc44e-7f63-7d46-b7e3-dfc736d617fe",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-1527",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-1527",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-1527 affects this package (high)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f63-7d46-b7e3-dfc736d617fe"
    },
    {
      "id": "chg_019fc44e-7f64-75cb-a108-29a50acba0b8",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-9679",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-9679",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-9679 affects this package (high)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f64-75cb-a108-29a50acba0b8"
    },
    {
      "id": "chg_019fc44e-7f67-7937-b89d-043456ae49c3",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-1525",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-1525",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-1525 affects this package (high)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f67-7937-b89d-043456ae49c3"
    },
    {
      "id": "chg_019fc44e-7f68-7b6d-9e8d-d77618716034",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-6733",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-6733",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-6733 affects this package (high)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f68-7b6d-9e8d-d77618716034"
    },
    {
      "id": "chg_019fc44e-7f69-72a2-b08a-9963aed3d230",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f69-72a2-b08a-9963aed3d230"
    },
    {
      "id": "chg_019fc44e-7f6a-7091-9679-1f07f6025adc",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-22036",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-22036",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-22036 affects this package (high)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f6a-7091-9679-1f07f6025adc"
    },
    {
      "id": "chg_019fc44e-7f6a-7af0-a2bb-02fae23e2839",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-12151",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-12151",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-12151 affects this package (high)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f6a-7af0-a2bb-02fae23e2839"
    },
    {
      "id": "chg_019fc44e-7f6d-7f09-9ce0-fb1cba286b67",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-2229",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-2229",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-2229 affects this package (high)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f6d-7f09-9ce0-fb1cba286b67"
    },
    {
      "id": "chg_019fc44e-7f6e-74de-99df-f1f1f0818df8",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@browserbasehq/stagehand > @ai-sdk/amazon-bedrock > @ai-sdk/provider-utils > undici",
        "refs": "[\"CVE-2026-1525\",\"CVE-2026-6733\",\"CVE-2026-1527\",\"CVE-2026-11525\",\"CVE-2026-22036\",\"CVE-2026-9679\",\"CVE-2026-2229\",\"CVE-2026-1526\",\"CVE-2026-12151\"]",
        "seen": "257",
        "package": "undici",
        "version": "5.29.0",
        "assessed": "251",
        "resolved": "250",
        "severity": "high",
        "transitive": "2",
        "unresolved": "7",
        "vulnerable": "[{\"name\":\"@ai-sdk/provider-utils\",\"version\":\"3.0.31\",\"depth\":3,\"path\":[\"@browserbasehq/stagehand\",\"@ai-sdk/amazon-bedrock\",\"@ai-sdk/provider-utils\"],\"refs\":[\"CVE-2026-8769\"]},{\"name\":\"undici\",\"version\":\"5.29.0\",\"depth\":4,\"path\":[\"@browserbasehq/stagehand\",\"@ai-sdk/amazon-bedrock\",\"@ai-sdk/provider-utils\",\"undici\"],\"refs\":[\"CVE-2026-1525\",\"CVE-2026-6733\",\"CVE-2026-1527\",\"CVE-2026-11525\",\"CVE-2026-22036\",\"CVE-2026-9679\",\"CVE-2026-2229\",\"CVE-2026-1526\",\"CVE-2026-12151\"]}]",
        "no_fix_refs": "[\"CVE-2026-8769\"]",
        "tree_source": "registry",
        "tree_status": "partial"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f6e-74de-99df-f1f1f0818df8"
    },
    {
      "id": "chg_019fc44e-7f74-7189-862f-8c7939d94f43",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-1526",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-1526",
        "severity": "high"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "CVE-2026-1526 affects this package (high)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f74-7189-862f-8c7939d94f43"
    },
    {
      "id": "chg_019fc44e-7f74-7915-92ea-cdda13abcc37",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "tier": "none"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 21:08:26.534071+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc44e-7f74-7915-92ea-cdda13abcc37"
    },
    {
      "id": "chg_019fc0e0-50fd-7dac-9d20-efff611a21f1",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 05:09:14.099138+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc0e0-50fd-7dac-9d20-efff611a21f1"
    },
    {
      "id": "chg_019fc0e0-50fe-7389-895b-f68e9e46213f",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 05:09:14.099138+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fc0e0-50fe-7389-895b-f68e9e46213f"
    },
    {
      "id": "chg_019fb618-1bb8-7a88-a0d2-8a829ef30e90",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 02:54:21.095489+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/pramoddutta-browserbash/browserbash-cli#chg-chg_019fb618-1bb8-7a88-a0d2-8a829ef30e90"
    }
  ],
  "days": [
    {
      "date": "2026-08-02",
      "total": 34,
      "delta": 29,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 21
    },
    {
      "date": "2026-08-01",
      "total": 5,
      "delta": -1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-07-31",
      "total": 6,
      "delta": -19,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-07-28",
      "total": 25,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-07-27",
      "total": 24,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}