CVE-2026-43891

< 0.55.1

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting

7.5HIGH

CVE-2026-41895

<= 0.54.9

changedetection.io is a free open source web page change detection tool. In 0.54.9 and earlier, xpath_filter() switches to XML mod

7.5HIGH

CVE-2026-35490

< 0.54.8

changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, the @login_optionally_required decorator

9.8CRITICAL

CVE-2026-35000

< 0.54.7

ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that

6.5MEDIUM

CVE-2026-33981

< 0.54.7

changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, the jq: and jqraw: include filter ex

6.5MEDIUM

CVE-2026-29065

< 0.54.4

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the

9.1CRITICAL

CVE-2026-29039

< 0.54.4

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, the changedetection.io applicati

7.5HIGH

CVE-2026-29038

< 0.54.4

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, there is a reflected cross-site

6.1MEDIUM

CVE-2026-27696

< 0.54.1

changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, changedetection.io is vulner

8.6HIGH

CVE-2026-27645

< 0.54.1

changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, the RSS single-watch endpoin

6.1MEDIUM

CVE-2026-25527

< 0.53.2

changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<group>/<filena

5.3MEDIUM

CVE-2025-62780

< 0.50.34

changedetection.io is a free open source web page change detection tool. A Stored Cross Site Scripting is present in changedetecti

3.5LOW

CVE-2024-23329

>= 0.39.14 and < 0.45.13

changedetection.io is an open source tool designed to monitor websites for content changes. In affected versions the API endpoint

3.7LOW

CVE-2023-24769

< 0.40.1.1

Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page.

5.4MEDIUM