https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T17:03:46.257875+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-71203 CVE-2026-71203 — changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema 2026-10-01T17:03:46.259997+00:00

Affected: dgtlmoon changedetection.io

changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method carries neither @auth.check_token nor @validate_openapi_request.