# Changelog

## Score

- CAI 53 → 53 (+0.1)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 79 → 80 (+0.8)
- Architecture 97 → 97 (+0.0)
- Maturity 62 → 64 (+2.3)
- Readiness 46 → 46 (+0.0)
- Security 52 → 52 (-0.5)
- Domain Modelling 70 → 70 (+0.0)
- Accessibility 62 → 62 (+0.0)

## Resolved (8)

- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- Medium CVE: [GHSA redacted] (komga-webui/package-lock.json)
- Medium CVE: [GHSA redacted] (komga-webui/package-lock.json)
- Medium CVE: [GHSA redacted] (komga-webui/package-lock.json)
- Off-boarding risk: anonymized user #1

## New (20)

- Critical CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- High CVE: [GHSA redacted] (komga-webui/package-lock.json)
- Medium CVE: [GHSA redacted] (komga-webui/package-lock.json)
- Medium CVE: [GHSA redacted] (komga-webui/package-lock.json)
- Medium CVE: [GHSA redacted] (komga-webui/package-lock.json)
- Medium CVE: [GHSA redacted] (komga-webui/package-lock.json)
- Medium IaC: CKV_DOCKER_3 (komga/docker/Dockerfile.tpl)
- Medium IaC: CKV_DOCKER_7 (komga/docker/Dockerfile.tpl)
- Medium IaC: CKV_DOCKER_9 (komga/docker/Dockerfile.tpl)
- Off-boarding risk: anonymized user #1
- The app icon is shown inline and the image path points to .github/readme-images rather than the main README, making it inaccessible from the top-level Komga docs. (.github/readme-images/app-icon.png)