Skip to content
OpenAdvisories

Package · PyPI

changedetection-io

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-35490

    changedetection.io has an Authentication Bypass via Decorator Ordering

    changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, the @login_optionally_required decorator is placed before (outer to) @blueprint.route() instead of after it. In Flask, @route() must be the outermost decorator because i…

    dgtlmoon changedetection.io changedetection-io PyPI
  • Critical 10.0
    CVE-2024-32651 Public exploit Scanner template EPSS 85%

    Server Side Template Injection in Jinja2 allows Remote Command Execution

    changedetection.io is an open source web page change detection, website watcher, restock monitor and notification service. There is a Server Side Template Injection (SSTI) in Jinja2 that allows Remote Command Execution on the server host. Attackers can run an…

    dgtlmoon changedetection.io changedetection-io PyPI