CVE-2026-33981
2 advisories.
PyPI/changedetection-io CVE-2026-33981: high
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
Action: Upgrade changedetection-io to 0.54.7 or later.
pip install changedetection-io==0.54.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54.7 | - |
Fixed versions
| 0.54.7 |
Sources
- osv: GHSA-58r7-4wr5-hfx8
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-58r7-4wr5-hfx8
- https://nvd.nist.gov/vuln/detail/CVE-2026-33981
- https://github.com/dgtlmoon/changedetection.io/commit/65517a9c74a0cbe1a4661314470b28131ef5557f
- https://github.com/dgtlmoon/changedetection.io
- https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.7
CVE-2026-33981 · published · modified · JSON
PyPI/changedetection-io CVE-2026-33981: medium 6.5
changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, the `jq:` and `jqraw:` include filter expressions allow use of the jq `env` builtin, which reads all process e
Action: Upgrade changedetection-io to 0.54.7 or later.
pip install changedetection-io==0.54.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54.7 | - |
Fixed versions
| 0.54.7 |
Sources
- osv: PYSEC-2026-2130
- https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.7
- https://github.com/dgtlmoon/changedetection.io/commit/65517a9c74a0cbe1a4661314470b28131ef5557f
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-58r7-4wr5-hfx8
CVE-2026-33981 · published · modified · JSON