Starstruk Logo MarkStarstruk

0.54.4

dgtlmoon/changedetection.io0.54.4Mar 4, 2026by dgtlmoon

AI Summary

This release includes support for Python 3.14 and patches multiple security vulnerabilities including Reflected XSS and Zip Slip.

Key Highlights

  • Added Python 3.14 CI test and support
  • Fixed CVE-2026-29038 Reflected XSS in RSS Tag Error
  • Fixed CVE-2026-29039 XPath Arbitrary File Read

New Features

  • Backup patching for zip slip advisory and upload size limits
  • UUID validation and secret.txt leakage fixes

Full Release Notes

## What's Changed
* fix(i18n): accept translated confirmation text when clearing snapshot history by @eren-karakus0 in https://github.com/dgtlmoon/changedetection.io/pull/3940
* Python 3.14 CI test and support by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/3941
* Updating API docs with better processor plugin info by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/3942
* CVE-2026-29038 - Reflected XSS in RSS Tag Error Response
* CVE-2026-29039 - XPath - Arbitrary File Read via unparsed-text()
* CVE-2026-29065 - fix(backups): patch zip slip advisory, zip bomb, upload size limit, UUID validation, secret.txt leakage, and  download edge cases

## New Contributors
* @eren-karakus0 made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/3940

**Full Changelog**: https://github.com/dgtlmoon/changedetection.io/compare/0.54.3...0.54.4