0.54.8

dgtlmoon/changedetection.io0.54.8Apr 4, 2026by dgtlmoon

AI Summary

A security-focused release that patches a critical authentication bypass vulnerability and introduces an extendable theme implementation.

Key Highlights

  • Fixed CVE-2026-35490 Authentication Bypass via Decorator Ordering
  • Implemented extendable theme pluggy system
  • Updated openapi-core dependency

New Features

  • CI improvements ensuring all unit tests are run

Full Release Notes

## What's Changed

CVE-2026-35490 - Authentication Bypass via Decorator Ordering


* Extendable theme pluggy implementation  by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4011
* CI - Ensure all unit tests are run by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4022
* Update openapi-core requirement from ~=0.22 to ~=0.23 by @dependabot[bot] in https://github.com/dgtlmoon/changedetection.io/pull/4009


**Full Changelog**: https://github.com/dgtlmoon/changedetection.io/compare/0.54.7...0.54.8