PyPI/changedetection-io CVE-2025-62780: low 3.5, EPSS 0.46%

changedetection.io: Stored XSS in Watch update via API

Action: Upgrade changedetection-io to 0.50.34 or later.

pip install changedetection-io==0.50.34

Affected

Fixed versions

Sources

• osv: GHSA-4c3j-3h7v-22q9
• https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-4c3j-3h7v-22q9
• https://nvd.nist.gov/vuln/detail/CVE-2025-62780
• https://github.com/dgtlmoon/changedetection.io/issues/3562
• https://github.com/dgtlmoon/changedetection.io/pull/3564
• https://github.com/dgtlmoon/changedetection.io
• https://github.com/dgtlmoon/changedetection.io/releases/tag/0.50.34
• https://github.com/pypa/advisory-database/tree/main/vulns/changedetection-io/PYSEC-2025-91.yaml

CVE-2025-62780 · published 2025-11-12T21:24:57Z · modified 2026-06-05T14:30:14.151541624Z · JSON