Changedetection (Webtechnologies) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 226 known versions, newest CVE from 2026-05-12. Vendor: Webtechnologies.
CVEs of Changedetection
- CVE-2026-43891 - CVSS 7.5 (high), 2026-05-12: changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot…
- CVE-2026-41895 - CVSS 8.2 (high), 2026-05-12: changedetection.io is a free open source web page change detection tool. In 0.54.9 and earlier, xpath_filter() switches to XML mode for XML/RSS content and…
- CVE-2026-35490 - CVSS 9.8 (critical), 2026-04-07: changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, the @login_optionally_required decorator is placed before (outer to)…
- CVE-2026-35000 - CVSS 7.1 (high), 2026-04-01: ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read…
- CVE-2026-33981 - CVSS 8.3 (high), 2026-03-27: changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, the `jq:` and `jqraw:` include filter expressions allow use of the…
- CVE-2026-29065 - CVSS 9.1 (critical), 2026-03-06: changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality…
- CVE-2026-29039 - CVSS 8.8 (high), 2026-03-06: changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, the changedetection.io application allows users to specify…
- CVE-2026-29038 - CVSS 6.1 (medium), 2026-03-06: changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, there is a reflected cross-site scripting (XSS)…
- CVE-2026-27696 - CVSS 8.6 (high), 2026-02-25: changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, changedetection.io is vulnerable to Server-Side Request…
- CVE-2026-27645 - CVSS 6.1 (medium), 2026-02-25: changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, the RSS single-watch endpoint reflects the UUID path…
- CVE-2026-25527 - CVSS 5.3 (medium), 2026-02-19: changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filename>` route accepts…
- CVE-2024-23329 - CVSS 3.7 (low), 2024-01-19: changedetection.io is an open source tool designed to monitor websites for content changes. In affected versions the API endpoint…
- CVE-2023-24769 - CVSS 5.4 (medium), 2023-02-17: Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows…
