Skip to content
OpenAdvisories

Package · PyPI

changedetection-io

20 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-62780 Scanner template

    changedetection.io vulnerable to stored XSS in Watch update via API

    changedetection.io is a free open source web page change detection tool. A Stored Cross Site Scripting is present in changedetection.io Watch update API in versions prior to 0.50.34 due to insufficient security checks. Two scenarios are possible. In the first…

  • Low 3.7

    changedetection.io API endpoint is not secured with API token

    changedetection.io is an open source tool designed to monitor websites for content changes. In affected versions the API endpoint `/api/v1/watch/<uuid>/history` can be accessed by any unauthorized user. As a result any unauthorized user can check one's watch …