Vulnerabilities in WeblateOrg
48 resultsCVE-2026-33212LOWWeblate: Improper access control for pending tasks in APIEPSS 0.2%CVE-2026-45106MEDIUMWeblate: Stored HTML injection in editor search previewEPSS 0.2%CVE-2026-77573LOWWeblate: DNS rebinding in VCS operations allows server-side request forgeryEPSS 0.2%CVE-2025-64326LOWWeblate leaks the IP of project members inviting users to assume reviewer roles in Audit logEPSS 0.2%CVE-2026-22251MEDIUMwlc may leak API keys due to an insecure API key configurationEPSS 0.2%CVE-2026-42150MEDIUMwlc: print_html outputs API data without HTML escaping, enabling stored XSSEPSS 0.2%CVE-2026-22250LOWwlc can skip SSL verificationEPSS 0.2%CVE-2026-62364LOWwlc may disclose API tokens to project-configured URLsEPSS 0.1%