PyPI/changedetection-io CVE-2026-29065: high, EPSS 0.60%
changedetection.io has Zip Slip vulnerability in the backup restore functionality
Action: Upgrade changedetection-io to 0.54.4 or later.
pip install changedetection-io==0.54.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54.4 | - |
Fixed versions
| 0.54.4 |
Sources
- osv: GHSA-25g8-2mcf-fcx9
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-25g8-2mcf-fcx9
- https://nvd.nist.gov/vuln/detail/CVE-2026-29065
- https://github.com/dgtlmoon/changedetection.io/commit/1d7d812eb0faab37042246e2fbce04f29bb1b3aa
- https://github.com/dgtlmoon/changedetection.io
- https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.4
CVE-2026-29065 · published · modified · JSON