Security
فارسی
All products

changedetection-io

PyPI · Package
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command ExecutionCVE-2024-32651 · GHSA-4R7V-WHPG-8RX3Version ranges need review. changedetection-io PyPI Critical Fix reported
changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path TraversalCVE-2024-56509 · GHSA-J5VV-6WJG-CFR8Version ranges need review. changedetection-io PyPI High Fix reported
changedetection.io API endpoint is not secured with API tokenCVE-2024-23329 · GHSA-HCVP-2CC7-JRWRVersion ranges need review. changedetection-io PyPI Low Fix reported
changedetection.io Cross-site Scripting vulnerabilityCVE-2024-34061 · GHSA-PWGC-W4X9-GW67Version ranges need review. changedetection-io PyPI Medium Fix reported
changedetection.io is vulnerable to unauthenticated static path traversalCVE-2026-25527 · GHSA-9JJ8-V89V-XJVWVersion ranges need review. changedetection-io PyPI Medium Fix reported
changedetection.io is Vulnerable to SSRF via Watch URLsCVE-2026-27696 · GHSA-3C45-4PJ5-CH7MVersion ranges need review. changedetection-io PyPI High Fix reported
changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()CVE-2026-29039 · GHSA-6FMW-82M7-JQ6PVersion ranges need review. changedetection-io PyPI High Fix reported
changedetection.io has Reflected XSS in its RSS Tag Error ResponseCVE-2026-29038 · GHSA-8WHX-V8QQ-PQ64Version ranges need review. changedetection-io PyPI Medium Fix reported
changedetection.io has Zip Slip vulnerability in the backup restore functionalityCVE-2026-29065 · GHSA-25G8-2MCF-FCX9Version ranges need review. changedetection-io PyPI High Fix reported
Changedetection.io Discloses Environment Variables via jq env Builtin in Include FiltersCVE-2026-33981 · GHSA-58R7-4WR5-HFX8Version ranges need review. changedetection-io PyPI High Fix reported
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error ResponseCVE-2026-27645 · GHSA-MW8M-398G-H89WVersion ranges need review. changedetection-io PyPI Medium Fix reported
PYSEC-2026-2131CVE-2026-35000 · PYSEC-2026-2131 changedetection-io PyPI High Fix reported
changedetection.io has an Arbitrary Local File Read via a crafted backup restoreCVE-2026-43891 · GHSA-8757-69J2-HX56Version ranges need review. changedetection-io PyPI High Fix reported
changedetection.io Path TraversalCVE-2024-51483 · GHSA-CWGG-57XJ-G77RVersion ranges need review. changedetection-io PyPI Medium Fix reported
changedetection.io path traversal using file URI scheme without supplying hostnameCVE-2024-51998 · GHSA-6JRF-RCJF-245RVersion ranges need review. changedetection-io PyPI High Fix reported
ChangeDetection.io XSS in watch overviewCVE-2025-52558 · GHSA-HWPG-X5HW-VPV9Version ranges need review. changedetection-io PyPI High Fix reported
Stored cross site scripting in changedetection.ioCVE-2023-24769 · GHSA-68WJ-C2JW-5PP9Version ranges need review. changedetection-io PyPI Medium Fix reported
changedetection.io project has an XXE vulnerabilityCVE-2026-41895 · GHSA-V7CP-2CX9-X793Version ranges need review. changedetection-io PyPI High Fix reported
changedetection.io: Stored XSS in Watch update via APICVE-2025-62780 · GHSA-4C3J-3H7V-22Q9Version ranges need review. changedetection-io PyPI Low Fix reported
changedetection.io Vulnerable to Authentication Bypass via Decorator OrderingCVE-2026-35490 · GHSA-JMRH-XMGH-X9J4Version ranges need review. changedetection-io PyPI Critical Fix reported