MITRE SAF has SAF CLI that can compare STIG versions of the same component (RHEL9 v1r1 vs RHEL9 v2r3) or even different components (RHEL7 v1r1 vs RHEL9 v2r3).