Darek b3120c2402 Add Polish translation (#4329)

2026-08-24 21:15:14 +02:00

..

api

GHSA-4j9m-cxq4-9c36 - Improved validation Stored CSS Injection via tag_colour Field (#4317)

2026-08-20 17:59:02 +02:00

blueprint

GHSA-23mp-8222-96fr - reflected XSS in /diff/<uuid>/download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm)

2026-08-24 16:24:22 +02:00

browser_steps

GHSA-56fq-63vj-9992 Improved URL filtering (#4315)

2026-08-20 15:49:41 +02:00

conditions

…

content_fetchers

GHSA-56fq-63vj-9992 Improved URL filtering (#4315)

2026-08-20 15:49:41 +02:00

diff

…

jinja2_custom

…

llm

…

model

…

notification

…

processors

GHSA-56fq-63vj-9992 Improved URL filtering (#4315)

2026-08-20 15:49:41 +02:00

realtime

…

static

…

store

…

templates

…

tests

LIBXML Data integrity fix, libxml must be locked across threads for any XML parsing (#4325)

2026-08-24 19:21:07 +02:00

translations

Add Polish translation (#4329)

2026-08-24 21:15:14 +02:00

widgets

…

__init__.py

…

.gitignore

…

auth_decorator.py

…

custom_queue.py

…

favicon_utils.py

…

flask_app.py

GHSA-q85w-c766-h5g8 - Advisory for four unprotected routes in price_data_follower, check_proxy and language handling that missing. Reported-by: Mayssare Amakhtari (@cy3erm) Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 13:47:31 +02:00

forms.py

LIBXML Data integrity fix, libxml must be locked across threads for any XML parsing (#4325)

2026-08-24 19:21:07 +02:00

gc_cleanup.py

…

html_tools.py

LIBXML Data integrity fix, libxml must be locked across threads for any XML parsing (#4325)

2026-08-24 19:21:07 +02:00

is_safe_url.py

…

languages.py

…

notification_service.py

…

pluggy_interface.py

…

PLUGIN_README.md

…

pytest.ini

…

queue_handlers.py

…

queuedWatchMetaData.py

…

rss_tools.py

…

run_basic_tests.sh

…

run_custom_browser_url_tests.sh

…

run_proxy_tests.sh

…

run_socks_proxy_tests.sh

…

strtobool.py

…

test_cli_opts.sh

…

time_handler.py

…

validate_url.py

ghsa-gwph-fp79-379w - changedetection.io SSRF protection bypass via CGNAT addresses, also adding to ALLOW_IANA_RESTRICTED_ADDRESSES behaviour.

2026-08-20 18:11:02 +02:00

worker_pool.py

…

worker.py

…