CVE-2026-29038
2 advisories.
PyPI/changedetection-io CVE-2026-29038: medium 6.1
changedetection.io has Reflected XSS in its RSS Tag Error Response
Action: Upgrade changedetection-io to 0.54.4 or later.
pip install changedetection-io==0.54.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54.4 | - |
Fixed versions
| 0.54.4 |
Sources
- osv: GHSA-8whx-v8qq-pq64
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-8whx-v8qq-pq64
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-mw8m-398g-h89w
- https://nvd.nist.gov/vuln/detail/CVE-2026-29038
- https://github.com/dgtlmoon/changedetection.io/commit/ec7d56f85d1e9690fca7cb4711c1fb20dffec780
- https://github.com/dgtlmoon/changedetection.io
- https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.4
CVE-2026-29038 · published · modified · JSON
PyPI/changedetection-io CVE-2026-29038: medium 6.1
changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, there is a reflected cross-site scripting (XSS) vulnerability identified in the /rss/tag/ endpoint of
Action: Upgrade changedetection-io to 0.54.4 or later.
pip install changedetection-io==0.54.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54.4 | - |
Fixed versions
| 0.54.4 |
Sources
- osv: PYSEC-2026-2127
- https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.4
- https://github.com/dgtlmoon/changedetection.io/commit/ec7d56f85d1e9690fca7cb4711c1fb20dffec780
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-8whx-v8qq-pq64
CVE-2026-29038 · published · modified · JSON