0.54.8
dgtlmoon/changedetection.io0.54.8Apr 4, 2026by dgtlmoon
AI Summary
A security-focused release that patches a critical authentication bypass vulnerability and introduces an extendable theme implementation.
Key Highlights
- Fixed CVE-2026-35490 Authentication Bypass via Decorator Ordering
- Implemented extendable theme pluggy system
- Updated openapi-core dependency
New Features
- CI improvements ensuring all unit tests are run
Full Release Notes
## What's Changed CVE-2026-35490 - Authentication Bypass via Decorator Ordering * Extendable theme pluggy implementation by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4011 * CI - Ensure all unit tests are run by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/4022 * Update openapi-core requirement from ~=0.22 to ~=0.23 by @dependabot[bot] in https://github.com/dgtlmoon/changedetection.io/pull/4009 **Full Changelog**: https://github.com/dgtlmoon/changedetection.io/compare/0.54.7...0.54.8