CVE-2026-33981 | dgtlmoon changedetection.io up to 0.54.6 Environment Variable SALTED_PASS/PLAYWRIGHT_DRIVER_URL/HTTP_PROXY information disclosure (GHSA-58r7-4wr5-hfx8)

A vulnerability has been found in dgtlmoon changedetection.io up to 0.54.6 and classified as problematic. The affected element is an unknown function of the component Environment Variable Handler. Performing a manipulation of the argument SALTED_PASS/PLAYWRIGHT_DRIVER_URL/HTTP_PROXY results in information disclosure.

This vulnerability was named CVE-2026-33981. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.