Starstruk Logo MarkStarstruk

0.54.7

dgtlmoon/changedetection.io0.54.7Mar 26, 2026by dgtlmoon

AI Summary

This release addresses several security vulnerabilities and adds functionality to track previous prices during restock events.

Key Highlights

  • Fixed XPath JSON doc Arbitrary File Read Bypass
  • Fixed Environment Variable Disclosure via jq env
  • Added `previous_price` to restock values

New Features

  • Fixed critical errors in Spanish translation
  • Cleared `last_error` state when content is identical

Full Release Notes

## Security
 * XPath json-doc() Arbitrary File Read Bypass ( Similar fix as CVE-2026-29039 )
 * CVE-2026-33981 - Environment Variable Disclosure via jq env Builtin in Include Filters



## What's Changed
* UI - Text tidyup by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/3989
* Realtime - Suppress socket.io errors in logs by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/3991
* Restock - Add previous_price to restock values #3987 by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/3993
* fix: correct critical errors in Spanish (es) translation by @rasputino in https://github.com/dgtlmoon/changedetection.io/pull/3994
* `last_error` should be cleared if page content was the same and there was no error by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/3997
* fix: Czech translation strings updated by @svetlemodry in https://github.com/dgtlmoon/changedetection.io/pull/4008

## New Contributors
* @rasputino made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/3994
* @svetlemodry made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/4008

**Full Changelog**: https://github.com/dgtlmoon/changedetection.io/compare/0.54.6...0.54.7