dgtlmoon vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 20252
3. 202622

Newest CVEs

• CVE-2026-95657

  dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting

  dgtlmoon · Changedetection.io

  Medium5.1
• CVE-2026-95656

  dgtlmoon changedetection.io Preview Endpoint __init__.py add_watch_ui_snapshot server-side request forgery

  dgtlmoon · changedetection.io

  Medium6.9
• CVE-2026-95273

  dgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversal

  dgtlmoon · changedetection.io

  Medium5.3
• CVE-2026-95272

  dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal

  dgtlmoon · changedetection.io

  Medium6.3
• CVE-2026-95271

  dgtlmoon changedetection.io Authentication Hook flask_app.py check_authentication improper authentication

  dgtlmoon · changedetection.io

  Medium6.9
• CVE-2026-95270

  dgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancy

  dgtlmoon · changedetection.io

  Medium6.3
• CVE-2026-92815

  changedetection.io through 0.60.6 SSRF via browser-step Goto URL

  dgtlmoon · changedetection.io

  High8.7
• CVE-2026-92814

  changedetection.io through 0.60.6 Cross-Site Scripting via watch_title

  dgtlmoon · changedetection.io

  Low2.3
• CVE-2026-71205

  changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force

  dgtlmoon · changedetection.io

  Medium6.5
• CVE-2026-71204

  changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement

  dgtlmoon · changedetection.io

  Medium6.3