{"action":"Upgrade changedetection-io to 0.53.2 or later.","affected":[{"fixed":"0.53.2","introduced":"0"}],"component":"changedetection-io","cve_ids":["CVE-2026-25527"],"ecosystem":"PyPI","epss":0.01025,"exploited":false,"fixed_versions":["0.53.2"],"ghsa_id":"GHSA-9jj8-v89v-xjvw","id":"tcs_01M5KFB209V13M42MYK86609ZR","modified_at":"2026-07-20T19:15:27.590444750Z","published_at":"2026-07-20T19:06:55Z","references":["https://osv.dev/vulnerability/GHSA-9jj8-v89v-xjvw","https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-9jj8-v89v-xjvw","https://nvd.nist.gov/vuln/detail/CVE-2026-25527","https://github.com/dgtlmoon/changedetection.io/commit/9d38b4517364831889b5b0d7b3465fd060403fd4","https://github.com/dgtlmoon/changedetection.io","https://github.com/pypa/advisory-database/tree/main/vulns/changedetection-io/PYSEC-2026-2124.yaml"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9jj8-v89v-xjvw","url":"https://osv.dev/vulnerability/GHSA-9jj8-v89v-xjvw"}],"summary":"changedetection.io is vulnerable to unauthenticated static path traversal"}