Security: dgtlmoon/changedetection.io
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Improper Input Validation Leading to LFR/Path TraversalGHSA-j5vv-6wjg-cfr8 published
Dec 27, 2024 by dgtlmoonHigh -
Path traversal using file URI scheme without supplying hostnameGHSA-6jrf-rcjf-245r published
Nov 7, 2024 by dgtlmoonHigh -
Path TraversalGHSA-cwgg-57xj-g77r published
Oct 31, 2024 by dgtlmoonModerate -
XSS reflected (Post Base) in /settingsGHSA-pwgc-w4x9-gw67 published
May 2, 2024 by dgtlmoonModerate -
Server Side Template Injection in Jinja2 allows Remote Command ExecutionGHSA-4r7v-whpg-8rx3 published
Apr 25, 2024 by dgtlmoonCritical -
API endpoint `/api/v1/watch/<uuid>/history` is not secured with API tokenGHSA-hcvp-2cc7-jrwr published
Jan 19, 2024 by dgtlmoonLow
Learn more about advisories related to dgtlmoon/changedetection.io in the GitHub Advisory Database