—
PYSEC-2026-1241
ChangeDetection.io XSS in watch overview
Quick fix
PYSEC-2026-1241 — changedetection-io: upgrade to the fixed version with the command below.
pip install --upgrade 'changedetection-io>=0.50.4'Details
### Impact XSS - Errors in filters from website page change detection watches were not being filtered.
### Patches
0.50.4
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/changedetection-io
Introduced in:
0Fixed in: 0.50.4Fix
pip install --upgrade 'changedetection-io>=0.50.4'References
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-hwpg-x5hw-vpv9[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2025-52558[ADVISORY]
- https://github.com/dgtlmoon/changedetection.io/commit/3d5a544ea674cfce517adcd498877a8d760d0931[WEB]
- https://github.com/dgtlmoon/changedetection.io[PACKAGE]
- https://pypi.org/project/changedetection-io[PACKAGE]
- https://github.com/advisories/GHSA-hwpg-x5hw-vpv9[ADVISORY]