dgtlmoon dadc804567 Security: XPath json-doc() Arbitrary File Read Bypass ( Similar fix as CVE-2026-29039 )

2026-03-26 09:44:17 +01:00

..

apprise

…

custom_browser_url

…

fetchers

…

import

…

itemprop_test_examples

…

plugins

…

proxy_list

…

proxy_socks5

…

restock

…

smtp

…

unit

Fixing bad replacement of metadata causing possible content removal #3906 (#3908)

2026-02-20 00:55:37 +01:00

visualselector

…

__init__.py

…

conftest.py

Python 3.14 CI test and support (#3941)

2026-03-02 11:28:52 +01:00

test2.pdf

…

test_access_control.py

…

test_add_replace_remove_filter.py

…

test_api_notification_urls_validation.py

…

test_api_notifications.py

…

test_api_openapi.py

API - Processors configuration is now part of the API (#3902)

2026-02-25 11:30:39 +01:00

test_api_search.py

…

test_api_security.py

…

test_api_tags.py

API - Create (POST) tag/group through API do not save processor_config_restock_diff values #3966 (#3968)

2026-03-10 11:19:59 +01:00

test_api.py

API - Invert changes_only flag for include_equal parameter, add test, fixes changesOnly option for history diff API call (#3976)

2026-03-12 16:15:37 +01:00

test_auth.py

…

test_automatic_follow_ldjson_price.py

…

test_backend.py

last_error should be cleared if page content was the same and there was no error (#3997)

2026-03-21 20:18:05 +01:00

test_backup.py

CVE-2026-29065 - fix(backups): patch zip slip advisory, zip bomb, upload size limit, UUID validation, secret.txt leakage, and download edge cases

2026-03-04 10:52:58 +01:00

test_basic_socketio.py

…

test_block_while_text_present.py

…

test_clone.py

…

test_commit_persistence.py

…

test_conditions.py

…

test_css_selector.py

…

test_datastore_isolation.py

…

test_element_removal.py

…

test_encoding.py

Content fetching -Better detection of other encodings, Replace/upgrade broken UTF-8 , Ensure rest of retrieved content is UTF-8 for the app (#3954)

2026-03-05 12:53:02 +01:00

test_errorhandling.py

…

test_extract_csv.py

Security - Adding small test and fixing overzealous filename cleaner (#3884)

2026-02-16 18:31:25 +01:00

test_extract_regex.py

…

test_filter_exist_changes.py

…

test_filter_failure_notification.py

…

test_group.py

…

test_history_consistency.py

…

test_html_to_text.py

…

test_i18n.py

fix(i18n): accept translated confirmation text when clearing snapshot history (#3940)

2026-03-02 10:44:42 +01:00

test_ignore_regex_text.py

…

test_ignore_text.py

…

test_ignore.py

…

test_ignorehyperlinks.py

Security - Adding small test and fixing overzealous filename cleaner (#3884)

2026-02-16 18:31:25 +01:00

test_ignorestatuscode.py

Security - Adding small test and fixing overzealous filename cleaner (#3884)

2026-02-16 18:31:25 +01:00

test_ignorewhitespace.py

Security - Adding small test and fixing overzealous filename cleaner (#3884)

2026-02-16 18:31:25 +01:00

test_import.py

…

test_jinja2.py

…

test_jsonpath_jq_selector.py

SONP - Attempt to strip out JSONP, treat as plaintext (#3983 #3982)

2026-03-17 11:10:48 +01:00

test_live_preview.py

…

test_nonrenderable_pages.py

…

test_notification_errors.py

…

test_notification.py

Notification Token {{diff}} can accept arguments like {{diff_added(lines=5, context=2)}} (#3923)

2026-02-24 16:15:05 +01:00

test_obfuscations.py

…

test_pdf.py

…

test_preview_endpoints.py

…

test_queue_handler.py

…

test_request.py

…

test_restock_itemprop.py

Restock - Add previous_price to restock values #3987 (#3993)

2026-03-20 18:43:36 +01:00

test_rss_group.py

…

test_rss_reader_mode.py

…

test_rss_single_watch.py

…

test_rss.py

…

test_scheduler.py

…

test_search.py

…

test_security.py

CVE-2026-27696 Small fix - Restricted hostnames can still be added but are only checked at fetch-time (not when rendering lists etc) (#3938)

2026-03-01 00:17:29 +01:00

test_settings_tag_force_reprocess.py

…

test_share_watch.py

Security - Adding small test and fixing overzealous filename cleaner (#3884)

2026-02-16 18:31:25 +01:00

test_source.py

Security - Adding small test and fixing overzealous filename cleaner (#3884)

2026-02-16 18:31:25 +01:00

test_trigger_regex_with_filter.py

Security - Adding small test and fixing overzealous filename cleaner (#3884)

2026-02-16 18:31:25 +01:00

test_trigger_regex.py

…

test_trigger.py

…

test_ui.py

…

test_unique_lines.py

…

test_watch_edited_flag.py

…

test_watch_fields_storage.py

…

test_xpath_default_namespace.py

…

test_xpath_selector_unit.py

…

test_xpath_selector.py

Security: XPath json-doc() Arbitrary File Read Bypass ( Similar fix as CVE-2026-29039 )

2026-03-26 09:44:17 +01:00

test.pdf

…

util.py

Security - Adding small test and fixing overzealous filename cleaner (#3884)

2026-02-16 18:31:25 +01:00