Webtechnologies vulnerabilities
We track 6 vulnerabilities in Webtechnologies products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.
Latest Webtechnologies vulnerabilities
- 7.5 High severity
changedetection.io: External Control of File Name or Path
changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a back
- 7.5 High severity
changedetection.io: Improper Restriction of XML External Entity Reference
changedetection.io is a free open source web page change detection tool. In 0.54.9 and earlier, xpath_filter() switches to XML mode for XML/RSS content and creates etree.XMLParser(strip_cdata=False) without explicitly disabling external entity resolution, exte
- 9.8 Critical severity
changedetection.io: Incorrect Authorization
changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, the @login_optionally_required decorator is placed before (outer to) @blueprint.route() instead of after it. In Flask, @route() must be the outermost decorator because it
- 9.1 Critical severity
changedetection.io: Improper Limitation of a Pathname to a Restricted Directory
changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patc
- 7.5 High severity
changedetection.io: Improper Control of Generation of Code
changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, the changedetection.io application allows users to specify XPath expressions as content filters via the include_filters field. These XPath expressions are process
- 8.6 High severity
changedetection.io: Server-Side Request Forgery
changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, changedetection.io is vulnerable to Server-Side Request Forgery (SSRF) because the URL validation function `is_safe_valid_url()` does not validate the resolve