We run nightly static scans of our application to help us track progress on fixing flaws. Our most recent scan suddenly has dozens of new flaws on it, most of which have the "Reopened" remediation status.

Only two minor code changes were made between our last two scans and those changes were in completely unrelated files.

So why are these suddenly showing back up on the report?

Also, why have they not been showing up until now, considering the date_first_occurence

for most of them is several months ago?

Any help is greatly appreciated.