{"action":"Upgrade changedetection-io to 0.54.4 or later.","affected":[{"fixed":"0.54.4","introduced":"0"}],"component":"changedetection-io","cve_ids":["CVE-2026-29038"],"ecosystem":"PyPI","epss":0.00294,"exploited":false,"fixed_versions":["0.54.4"],"ghsa_id":"GHSA-8whx-v8qq-pq64","id":"tcs_01M5KGXMN5FD152GY5Y2B21P26","modified_at":"2026-07-13T07:15:17.112167238Z","published_at":"2026-03-06T07:16:01.393Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2127","https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.4","https://github.com/dgtlmoon/changedetection.io/commit/ec7d56f85d1e9690fca7cb4711c1fb20dffec780","https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-8whx-v8qq-pq64"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-2127","url":"https://osv.dev/vulnerability/PYSEC-2026-2127"}],"summary":"changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, there is a reflected cross-site scripting (XSS) vulnerability identified in the /rss/tag/ endpoint of"}