CVE-2026-29065

changedetection.io <0.54.4 - Path Traversal

Title source: llm

Description

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.

Scores

EPSS 0.0006
EPSS Percentile 18.3%

Classification

CWE
CWE-22
Status draft

Affected Products (1)

pypi/changedetection.io < 0.54.4PyPI

Timeline

Published Mar 06, 2026
Tracked Since Mar 06, 2026