changedetection.io

mirror of https://github.com/dgtlmoon/changedetection.io.git synced 2026-08-26 08:06:39 +00:00

Author	SHA1	Message	Date
dgtlmoon	fce24780e7	ghsa-gwph-fp79-379w - changedetection.io SSRF protection bypass via CGNAT addresses, also adding to `ALLOW_IANA_RESTRICTED_ADDRESSES` behaviour. Build and push containers / metadata (push) Canceled after 0s Details Build and push containers / build-push-containers (push) Canceled after 0s Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Canceled after 0s Details ChangeDetection.io App Test / lint-code (push) Canceled after 0s Details ChangeDetection.io App Test / lint-translations (push) Canceled after 0s Details ChangeDetection.io App Test / lint-template-i18n (push) Canceled after 0s Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built package works basically. (push) Canceled after 0s Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Canceled after 0s Details ChangeDetection.io App Test / test-application-3-10 (push) Canceled after 0s Details ChangeDetection.io App Test / test-application-3-11 (push) Canceled after 0s Details ChangeDetection.io App Test / test-application-3-12 (push) Canceled after 0s Details ChangeDetection.io App Test / test-application-3-13 (push) Canceled after 0s Details ChangeDetection.io App Test / test-application-3-14 (push) Canceled after 0s Details	2026-08-20 18:11:02 +02:00
dgtlmoon	50389b0778	GHSA-56fq-63vj-9992 Improved URL filtering (#4315 )	2026-08-20 15:49:41 +02:00
Amir	5015bfa0cd	fix: URL validation rejects valid URLs with '\|' in the anchor/fragment (#4209 ) (#4243 ) Build and push containers / metadata (push) Has been cancelled Details Build and push containers / build-push-containers (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Has been cancelled Details ChangeDetection.io App Test / lint-code (push) Has been cancelled Details ChangeDetection.io App Test / lint-translations (push) Has been cancelled Details ChangeDetection.io App Test / lint-template-i18n (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built package works basically. (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-10 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-11 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-12 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-13 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-14 (push) Has been cancelled Details	2026-07-06 19:27:59 +02:00
dgtlmoon	08017d66d6	Security - SSRF in ChangeDetection.io via urlparse/urllib3 Parser Differential	2026-05-25 17:57:41 +02:00
dgtlmoon	00d26e3656	UI - LLM - SSRF guard for the LLM `api_base` setting (#4157 )	2026-05-19 11:05:02 +02:00
dgtlmoon	ecd8af94f6	Various memory and CPU improvements (#3960 ) Build and push containers / metadata (push) Has been cancelled Details Build and push containers / build-push-containers (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built package works basically. (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Has been cancelled Details ChangeDetection.io App Test / lint-code (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-10 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-11 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-12 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-13 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-14 (push) Has been cancelled Details	2026-03-08 14:32:50 +01:00
dgtlmoon	1889a10ef6	CVE-2026-27696 Small fix - Restricted hostnames can still be added but are only checked at fetch-time (not when rendering lists etc) (#3938 )	2026-03-01 00:17:29 +01:00
dgtlmoon	9e907d8466	Unresolvable hostnames should still be added, they are checked for security at fetch time (#3933 )	2026-02-27 11:00:44 +01:00
dgtlmoon	fe7aa38c65	CVE-2026-27696 - Server-Side Request Forgery (SSRF) via Watch URLs, set env var `ALLOW_IANA_RESTRICTED_ADDRESSES` to `true` to access IANA reserved URLs such as http://169.254.169.254 , http://10.0.0.1/, http://127.0.0.1/, etc.	2026-02-23 21:56:43 +01:00
dgtlmoon	151e603af7	API - Validation improvements (#3782 ) Build and push containers / metadata (push) Has been cancelled Details Build and push containers / build-push-containers (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built package works basically. (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Has been cancelled Details ChangeDetection.io App Test / lint-code (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-10 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-11 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-12 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-13 (push) Has been cancelled Details	2026-01-19 18:16:25 +01:00
dgtlmoon	ab0b85d088	Unify safe URL checking to the one function, strengthen tests and filters (#3564 ) Build and push containers / metadata (push) Has been cancelled Details Build and push containers / build-push-containers (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built package works basically. (push) Has been cancelled Details Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Has been cancelled Details ChangeDetection.io Container Build Test / Build linux/amd64 (alpine) (push) Has been cancelled Details ChangeDetection.io Container Build Test / Build linux/arm64 (alpine) (push) Has been cancelled Details ChangeDetection.io Container Build Test / Build linux/amd64 (main) (push) Has been cancelled Details ChangeDetection.io Container Build Test / Build linux/arm/v7 (main) (push) Has been cancelled Details ChangeDetection.io Container Build Test / Build linux/arm/v8 (main) (push) Has been cancelled Details ChangeDetection.io Container Build Test / Build linux/arm64 (main) (push) Has been cancelled Details ChangeDetection.io App Test / lint-code (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-10 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-11 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-12 (push) Has been cancelled Details ChangeDetection.io App Test / test-application-3-13 (push) Has been cancelled Details	2025-10-28 13:24:37 +01:00