weblate Security Advisories - Pypi | Ecosyste.ms: Advisories

weblate

A web-based continuous localization system with tight version control integration

View on github.com · View on pypi.org

Security Advisories for weblate in pypi

Low

19 days ago

Weblate leaks the IP of project member inviting user to be reviewer in Audit log GSA_kwCzR0hTQS1ncjM1LXZweDItcXhoY84ABOO9

pypi weblate

Low

3 months ago

Weblate has a long session expiry when verifying second factor GSA_kwCzR0hTQS0zNzdqLXdqMzgtNDcyOM4ABLqV

pypi Weblate

Low

5 months ago

Weblate exposes personal IP address via e-mail GSA_kwCzR0hTQS00cXFmLTltNWMtdzJjNc4ABJD1

pypi weblate

Moderate

5 months ago

Weblate lacks rate limiting when verifying second factor GSA_kwCzR0hTQS01N2pnLW05OTctY3gzcc4ABJD0

pypi weblate

Low

7 months ago

VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext GSA_kwCzR0hTQS1tNjdtLTNwNWctY3c5as4ABGyC

pypi weblate

Low

over 1 year ago

Weblate vulnerable to improper sanitization of project backups GSA_kwCzR0hTQS1qZmdwLTY3NHgtNnE0cM4AA9cu

pypi Weblate

Moderate

over 3 years ago

Weblate user account enumeration via reset password form GSA_kwCzR0hTQS1qMjRnLWdtNzYtajgyOc4AAb1V

pypi weblate

High

over 3 years ago

Command injection in Weblate GSA_kwCzR0hTQS1oMmc1LTJyaHgtZmZnas0wSw

pypi Weblate

High

over 3 years ago

Improper Neutralization of Special Elements used in a Command ('Command Injection') in Weblate GSA_kwCzR0hTQS0zODcyLWY0OHAtcHhxas0wPw

pypi Weblate

Moderate

over 3 years ago

Cross-site Scripting in Weblate GSA_kwCzR0hTQS02anA2LTlyZjktZ2M2Ns0u1Q

pypi Weblate

Filter by Severity

Low 5 Moderate 3 High 2