HarborGuard / CVE
Back to search
HIGHCVE-2026-29065Published Modified CNA GitHub_M

CVE-2026-29065: changedetection.io: Zip Slip vulnerability in the backup restore functionality

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.

Metrics

CVSS v4.0
8.8
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • dgtlmoon / changedetection.io
    < 0.54.4
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
References