# Changelog

## Score

- CAI 40 → 42 (+1.9)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 60 → 60 (+0.0)
- Architecture 78 → 78 (+0.0)
- Maturity 53 → 59 (+6.6)
- Readiness 19 → 19 (+0.0)
- Security 69 → 72 (+2.9)

## Resolved (13)

- High CVE: MessagePack 2.4.35
- High CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Secret: generic-api-key (src/Services/Customers/Inflow.Services.Customers.Api/appsettings.json)

## New (12)

- High CVE: MessagePack 2.4.35
- High CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35
- Medium CVE: MessagePack 2.4.35

## API surface

- Unchanged — 29 HTTP endpoints