Known Vulnerabilities for Weblate by WeblateOrg
Listed below are 10 of the newest known vulnerabilities associated with "Weblate" by "WeblateOrg".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-44264 json | Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user... | Not Provided | 2026-05-07 | 2026-05-07 |
| CVE-2026-44263 json | Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for... | Not Provided | 2026-05-07 | 2026-05-07 |
| CVE-2026-42150 json | wlc is a Weblate command-line client using Weblate's REST API. Prior to version 2.0.0, the HTML output format in wlc embeds A... | Not Provided | 2026-05-08 | 2026-05-08 |
| CVE-2026-41654 json | Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default... | Not Provided | 2026-05-07 | 2026-05-07 |
| CVE-2026-41519 json | Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes their password, browser sessions are c... | Not Provided | 2026-05-07 | 2026-05-07 |
| CVE-2026-40256 json | Weblate is a web based localization tool. In versions prior to 5.17, repository-boundary validation relies on string prefix c... | Not Provided | 2026-04-15 | 2026-04-16 |
| CVE-2026-39845 json | Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protect... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-34393 json | Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-34244 json | Weblate is a web based localization tool. In versions prior to 5.17, a user with the project.edit permission (granted by the ... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-34242 json | Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn't verify downloaded files,... | Not Provided | 2026-04-15 | 2026-04-15 |