HIGHPyPI
GHSA-25g8-2mcf-fcx9· CVE-2026-29065, PYSEC-2026-2129changedetection.io has Zip Slip vulnerability in the backup restore functionality
Modified: 7/13/2026
package
PyPI/changedetection-io
pkg:pypi/changedetection-io
HIGH8.6PyPI
GHSA-3c45-4pj5-ch7m· CVE-2026-27696, PYSEC-2026-2126changedetection.io is Vulnerable to SSRF via Watch URLs
Modified: 7/13/2026
LOW3.5PyPI
GHSA-4c3j-3h7v-22q9· CVE-2025-62780, PYSEC-2025-91changedetection.io: Stored XSS in Watch update via API
Modified: 6/5/2026
CRITICAL10.0PyPI
GHSA-4r7v-whpg-8rx3· CVE-2024-32651, PYSEC-2026-310changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
Modified: 9/10/2026
HIGHPyPI
GHSA-58r7-4wr5-hfx8· CVE-2026-33981, PYSEC-2026-2130Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
Modified: 7/13/2026
MEDIUM5.4PyPI
GHSA-68wj-c2jw-5pp9· CVE-2023-24769, PYSEC-2023-10Stored cross site scripting in changedetection.io
Modified: 3/19/2025
HIGHPyPI
GHSA-6fmw-82m7-jq6p· CVE-2026-29039, PYSEC-2026-2128changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()
Modified: 7/13/2026
HIGH8.6PyPI
GHSA-6jrf-rcjf-245r· CVE-2024-51998, PYSEC-2026-1239changedetection.io path traversal using file URI scheme without supplying hostname
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-8757-69j2-hx56· CVE-2026-43891, PYSEC-2026-30changedetection.io has an Arbitrary Local File Read via a crafted backup restore
Modified: 7/8/2026
MEDIUM6.1PyPI
GHSA-8whx-v8qq-pq64· CVE-2026-29038, PYSEC-2026-2127changedetection.io has Reflected XSS in its RSS Tag Error Response
Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-9jj8-v89v-xjvw· CVE-2026-25527, PYSEC-2026-2124changedetection.io is vulnerable to unauthenticated static path traversal
Modified: 7/20/2026
MEDIUM6.5PyPI
GHSA-cwgg-57xj-g77r· CVE-2024-51483, PYSEC-2026-1240changedetection.io Path Traversal
Modified: 7/7/2026
LOW3.7PyPI
GHSA-hcvp-2cc7-jrwr· CVE-2024-23329, PYSEC-2024-15changedetection.io API endpoint is not secured with API token
Modified: 9/10/2026
HIGHPyPI
GHSA-hwpg-x5hw-vpv9· CVE-2025-52558, PYSEC-2026-1241ChangeDetection.io XSS in watch overview
Modified: 7/7/2026
HIGH8.6PyPI
GHSA-j5vv-6wjg-cfr8· CVE-2024-56509, PYSEC-2026-1242changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
Modified: 9/10/2026
CRITICAL9.8PyPI
GHSA-jmrh-xmgh-x9j4· CVE-2026-35490, PYSEC-2026-28changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering
Modified: 6/5/2026
MEDIUM6.1PyPI
GHSA-mw8m-398g-h89w· CVE-2026-27645, PYSEC-2026-2125changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
Modified: 7/13/2026
MEDIUM4.3PyPI
GHSA-pwgc-w4x9-gw67· CVE-2024-34061, PYSEC-2026-1243changedetection.io Cross-site Scripting vulnerability
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-v7cp-2cx9-x793· CVE-2026-41895, PYSEC-2026-29changedetection.io project has an XXE vulnerability
Modified: 6/5/2026
—PyPI
PYSEC-2023-10· CVE-2023-24769, GHSA-68wj-c2jw-5pp9Modified: 6/10/2026
LOW3.7PyPI
PYSEC-2024-15· CVE-2024-23329, GHSA-hcvp-2cc7-jrwrModified: 1/26/2024
MEDIUM5.4PyPI
PYSEC-2025-91· CVE-2025-62780, GHSA-4c3j-3h7v-22q9Modified: 5/20/2026
HIGH8.6PyPI
PYSEC-2026-1239· CVE-2024-51998, GHSA-6jrf-rcjf-245rchangedetection.io path traversal using file URI scheme without supplying hostname
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-1240· CVE-2024-51483, GHSA-cwgg-57xj-g77rchangedetection.io Path Traversal
Modified: 7/7/2026
—PyPI
PYSEC-2026-1241· CVE-2025-52558, GHSA-hwpg-x5hw-vpv9ChangeDetection.io XSS in watch overview
Modified: 7/7/2026
HIGH8.6PyPI
PYSEC-2026-1242· CVE-2024-56509, GHSA-j5vv-6wjg-cfr8changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-1243· CVE-2024-34061, GHSA-pwgc-w4x9-gw67changedetection.io Cross-site Scripting vulnerability
Modified: 7/7/2026
MEDIUM5.3PyPI
PYSEC-2026-2124· CVE-2026-25527, GHSA-9jj8-v89v-xjvwModified: 7/13/2026
MEDIUM6.1PyPI
PYSEC-2026-2125· CVE-2026-27645, GHSA-mw8m-398g-h89wModified: 7/13/2026
HIGH8.6PyPI
PYSEC-2026-2126· CVE-2026-27696, GHSA-3c45-4pj5-ch7mModified: 7/13/2026
MEDIUM6.1PyPI
PYSEC-2026-2127· CVE-2026-29038, GHSA-8whx-v8qq-pq64Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2026-2128· CVE-2026-29039, GHSA-6fmw-82m7-jq6pModified: 7/13/2026
CRITICAL9.1PyPI
PYSEC-2026-2129· CVE-2026-29065, GHSA-25g8-2mcf-fcx9Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-2130· CVE-2026-33981, GHSA-58r7-4wr5-hfx8Modified: 7/13/2026
—PyPI
PYSEC-2026-2131· CVE-2026-35000Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-28· CVE-2026-35490, GHSA-jmrh-xmgh-x9j4Modified: 5/20/2026
HIGH7.5PyPI
PYSEC-2026-29· CVE-2026-41895, GHSA-v7cp-2cx9-x793Modified: 5/20/2026
HIGH7.5PyPI
PYSEC-2026-30· CVE-2026-43891, GHSA-8757-69j2-hx56Modified: 6/10/2026
CRITICAL10.0PyPI
PYSEC-2026-310· CVE-2024-32651, GHSA-4r7v-whpg-8rx3changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
Modified: 7/13/2026