PyPI / changedetection-io

changedetection.io has Zip Slip vulnerability in the backup restore functionality

Modified: 3/6/2026

changedetection.io is Vulnerable to SSRF via Watch URLs

Modified: 2/25/2026

changedetection.io: Stored XSS in Watch update via API

Modified: 6/5/2026

changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution

Modified: 8/6/2025

Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters

Modified: 3/30/2026

Stored cross site scripting in changedetection.io

Modified: 3/19/2025

changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()

Modified: 3/6/2026

changedetection.io path traversal using file URI scheme without supplying hostname

Modified: 11/8/2024

changedetection.io has an Arbitrary Local File Read via a crafted backup restore

Modified: 6/10/2026

changedetection.io has Reflected XSS in its RSS Tag Error Response

Modified: 3/6/2026

changedetection.io Path Traversal

Modified: 11/1/2024

changedetection.io API endpoint is not secured with API token

Modified: 9/13/2024

ChangeDetection.io XSS in watch overview

Modified: 6/27/2025

changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

Modified: 12/27/2024

changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering

Modified: 6/5/2026

changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response

Modified: 2/25/2026

changedetection.io Cross-site Scripting vulnerability

Modified: 5/3/2024

changedetection.io project has an XXE vulnerability

Modified: 6/5/2026

Modified: 6/10/2026

Modified: 1/26/2024

Modified: 5/20/2026

Modified: 5/20/2026

Modified: 5/20/2026

Modified: 6/10/2026