ChangeDetection.io XSS in watch overview

Description

References

• dgtlmoon/changedetection.io security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-52558 · ADVISORY
• dgtlmoon/changedetection.io commit 3d5a544 · WEB
• dgtlmoon/changedetection.io · PACKAGE
• pypi.org/project/changedetection-io · PACKAGE
• GitHub Advisory GHSA-hwpg-x5hw-vpv9 · ADVISORY

Weitere Schwachstellen in changedetection-io

• CVE-2026-43891HOCH 7.5changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-c…
• CVE-2026-41895HOCH 7.5changedetection.io is a free open source web page change detection tool. In 0.54.9 and earlier, xpath_filter() switches to XML mode for XML/…
• CVE-2026-35490KRITISCH 9.8changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, the @login_optionally_required decorator is placed…
• CVE-2026-35000MITTEL 6.5ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows att…
• CVE-2026-33981MITTEL 6.5changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, the `jq:` and `jqraw:` include filter expressions …