We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit only updates auto-generated command-line help documentation. It removes stray formatting characters in an Ethereum command description and adds newly available Solana commands to the help output. There are no code behavior chan…
d09dc64aby M1nd3r+2−22 filesThis commit changes the Trezor firmware build environment so that a Python package tool called 'uv' is forced to use the Python interpreter provided by the Nix build system, rather than silently downloading and using its own. The change pr…
f07b610cby M1nd3r+6−01 fileThis commit fixes the Nix package build for Core Lightning so that `nix build` works again. It is a build-system/documentation fix, not a security patch. There is no vulnerability being fixed here.
531673a4by enaples+40−72 filesThis commit is a routine build update for the Zcash parts of the Keystone 3 firmware. It switches several Rust libraries from using specific GitHub revisions to using published versions from crates.io, and bumps a few version numbers. Ther…
ef5ad05fby Adam Tucker+37−454 filesThis commit only changes user-visible text strings in the Trezor firmware. It updates English translations, removes duplicate layout-specific versions of the same phrase, adds missing periods, and introduces a new description string shown …
42dbc643by Michal Kazda+19−212 filesThis commit is a routine refresh of automatically generated translation files. It updates user-facing text strings (for example, changing punctuation or wording of on-screen messages) and adds one new string used during PIN setup. There is…
6ee734adby Michal Kazda+12201−121645 filesThis commit only updates expected test result fingerprints (hashes) in a single test data file. It does not change any firmware, application, or cryptographic code. There is no indication of a security fix or vulnerability being addressed.
27ea3039by Michal Kazda+137−1371 fileThis commit fixes a bug in Electrum's wallet storage recovery. If a wallet file was partially corrupted (a 'patch' was cut off mid-write), the app could recover the old data but then fail to mark the wallet as changed. As a result, later u…
f75f1958by f321x+22−12 filesThis commit fixes a bug in how Electrum builds JSON Patch pointers when wallet data contains special characters like '/' or '~' in keys. Before the fix, these characters were not escaped, which could cause patch operations to target the wr…
97007d9eby f321x+13−12 filesThis is a tiny build-script cleanup. It replaces a hardcoded Windows build target string with a variable that already holds the same value. There is no security issue visible in the change itself.
7e1a750dby Hennadii Stepanov+1−11 fileThis commit only updates a submodule containing screenshots used for documentation or testing. There is no code change to the SeedSigner application itself, so it has no security impact on users.
387fa91fby okaybro+1−11 fileThis commit is a straightforward internal code cleanup: it replaces the use of numeric seed indexes (seed_num) with direct references to Seed objects throughout the user interface and tests. There is no security-relevant change; it is pure…
65e312c9by okaybro+238−2698 filesA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.