High
CVE-2025-52558
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filters
High
CVE-2024-56509
changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
High
CVE-2024-51998
changedetection.io path traversal using file URI scheme without supplying hostname
Medium
CVE-2024-51483
changedetection.io Path Traversal
Medium
CVE-2024-34061
changedetection.io Cross-site Scripting vulnerability
Critical
CVE-2024-32651
changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
High
CVE-2026-43891
changedetection.io has an Arbitrary Local File Read via a crafted backup restore
High
CVE-2026-41895
changedetection.io project has an XXE vulnerability
Critical
CVE-2026-35490
changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering
Unrated
CVE-2026-35000
ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by using unblocked XPat
High
CVE-2026-33981
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
High
CVE-2026-29065
changedetection.io has Zip Slip vulnerability in the backup restore functionality
Medium
CVE-2026-29038
changedetection.io has Reflected XSS in its RSS Tag Error Response
High
CVE-2026-29039
changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()
Medium
CVE-2026-27645
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
High
CVE-2026-27696
changedetection.io is Vulnerable to SSRF via Watch URLs
Medium
CVE-2026-25527
changedetection.io is vulnerable to unauthenticated static path traversal
Low
CVE-2025-62780
changedetection.io: Stored XSS in Watch update via API
Low
CVE-2024-23329
changedetection.io API endpoint is not secured with API token
Medium
CVE-2023-24769
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts o
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.