changedetection.io has Zip Slip vulnerability in the backup restore functionality
Modified: 7/13/2026
package
pkg:pypi/changedetection-io
changedetection.io has Zip Slip vulnerability in the backup restore functionality
Modified: 7/13/2026
changedetection.io is Vulnerable to SSRF via Watch URLs
Modified: 7/13/2026
changedetection.io: Stored XSS in Watch update via API
Modified: 6/5/2026
changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
Modified: 9/10/2026
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
Modified: 7/13/2026
Stored cross site scripting in changedetection.io
Modified: 3/19/2025
changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()
Modified: 7/13/2026
changedetection.io path traversal using file URI scheme without supplying hostname
Modified: 7/7/2026
changedetection.io has an Arbitrary Local File Read via a crafted backup restore
Modified: 7/8/2026
changedetection.io has Reflected XSS in its RSS Tag Error Response
Modified: 7/13/2026
changedetection.io is vulnerable to unauthenticated static path traversal
Modified: 7/20/2026
changedetection.io Path Traversal
Modified: 7/7/2026
changedetection.io API endpoint is not secured with API token
Modified: 9/10/2026
ChangeDetection.io XSS in watch overview
Modified: 7/7/2026
changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
Modified: 9/10/2026
changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering
Modified: 6/5/2026
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
Modified: 7/13/2026
changedetection.io Cross-site Scripting vulnerability
Modified: 9/10/2026
changedetection.io project has an XXE vulnerability
Modified: 6/5/2026
Modified: 6/10/2026
Modified: 1/26/2024
Modified: 5/20/2026
changedetection.io path traversal using file URI scheme without supplying hostname
Modified: 7/7/2026
changedetection.io Path Traversal
Modified: 7/7/2026
ChangeDetection.io XSS in watch overview
Modified: 7/7/2026
changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
Modified: 7/7/2026
changedetection.io Cross-site Scripting vulnerability
Modified: 7/7/2026
Modified: 7/13/2026
Modified: 7/13/2026
Modified: 7/13/2026
Modified: 7/13/2026
Modified: 7/13/2026
Modified: 7/13/2026
Modified: 7/13/2026
Modified: 7/13/2026
Modified: 5/20/2026
Modified: 5/20/2026
Modified: 6/10/2026
changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
Modified: 7/13/2026