Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

weblate

pypi

A web-based continuous localization system with tight version control integration

View on github.com · View on pypi.org

Security Advisories for weblate in pypi

High
about 2 months ago

Weblate has IDOR in GroupViewSet that allows authenticated project manager to gain unauthorized read access to any private project GSA_kwCzR0hTQS0ycTJxLWpyOWctdjlyZs4ABmBP

pypi Weblate
Moderate
about 2 months ago

Private Weblate projects vulnerable to observable object existence disclosure via globally scoped object lookups GSA_kwCzR0hTQS0ycDlnLXgzY3YtNWhoNM4ABmBO

pypi weblate
Moderate
3 months ago

Weblate SSRF: outbound URL guard misses some private ranges GSA_kwCzR0hTQS12bWZjLTk5ODItMm00Nc4ABaUn

pypi weblate
Moderate
5 months ago

Weblate has a Server-Side Request Forgery issue GSA_kwCzR0hTQS1oZnB2LW1jNXYtcDltbc4ABXY3

pypi Weblate
Moderate
5 months ago

Weblate: Stored HTML injection in editor search preview GSA_kwCzR0hTQS02d3hjLThtZ3EtdzI2bc4ABW86

pypi weblate
Moderate
5 months ago

Weblate vulnerable to XSS via crafted Markdown GSA_kwCzR0hTQS01Y212LTNyYzQtNzI3Oc4ABWXC

pypi weblate
Moderate
5 months ago

Weblate Vulnerable to Private Translation Enumeration via Screenshot API GSA_kwCzR0hTQS1nY2c1LTg2anItZjdqZ84ABWXB

pypi weblate
Moderate
6 months ago

Weblate Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url GSA_kwCzR0hTQS1jd2N4LTM4MnYtOG05Z84ABV-C

pypi weblate
Moderate
6 months ago

Weblate Doesn't Invalidate API Token on Password Change GSA_kwCzR0hTQS02ajhqLTRxcDMtMzZwMs4ABV-B

pypi weblate
Moderate
6 months ago

Weblate: Prefix-Based Repository Boundary Check Bypass via Symlink/Junction Path Prefix Collision GSA_kwCzR0hTQS1mZmdoLTNqcmYtOHd2aM4ABVYt

pypi weblate
Moderate
6 months ago

Weblate: SSRF via the webhook add-on using unprotected fetch_url() GSA_kwCzR0hTQS1mOGh2LWc1NDktaHdnMs4ABVYp

pypi weblate
High
6 months ago

Weblate: Privilege escalation in the user API endpoint GSA_kwCzR0hTQS0zMzgyLWd3OXgtNDc3ds4ABVYk

pypi weblate
Moderate
6 months ago

Weblate: SSRF via Project-Level Machinery Configuration GSA_kwCzR0hTQS14cndyLWZjdzYtZm1xOM4ABVYj

pypi weblate
High
6 months ago

Weblate: Arbitrary File Read via Symlink GSA_kwCzR0hTQS1odjk5LW14bTUtcTM5N84ABVYi

pypi weblate
Moderate
6 months ago

Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploads GSA_kwCzR0hTQS01Zmh4LTlqd2otODY3bc4ABVYd

pypi weblate
High
6 months ago

Weblate: Remote code execution during backup restoration GSA_kwCzR0hTQS01NThnLWg3NTMtNm0zM84ABVYc

pypi weblate
Moderate
6 months ago

Weblate: JavaScript localization CDN add-on allows arbitrary local file read outside the repository GSA_kwCzR0hTQS1tcXBoLTdoNDktaHFmbc4ABVYb

pypi weblate
Moderate
6 months ago

Weblate: Improper access control for the translation memory in API GSA_kwCzR0hTQS1tcGY1LTN2cGgtcTc1cs4ABVYa

pypi weblate
Low
6 months ago

Weblate: Improper access control for pending tasks in API GSA_kwCzR0hTQS12ajQ1LXgzcGotZjR3NM4ABVYZ

pypi weblate
Moderate
8 months ago

Weblate: Missing access control for the AddonViewSet API exposes all addon configurations GSA_kwCzR0hTQS13cHBjLTdjcTctY2dmds4ABS3T

pypi weblate
Moderate
8 months ago

Weblate has an argument injection in management console GSA_kwCzR0hTQS0zM2ZtLTZncDctNHA0N84ABSa9

pypi Weblate
Low
9 months ago

Weblate leaks information via screenshots GSA_kwCzR0hTQS0zZzJmLTRyamctOTM4Nc4ABRGG

pypi weblate
Critical
10 months ago

Weblate is vulnerable to RCE through Git config file overwrite GSA_kwCzR0hTQS04dmNnLWNmeGotcDVtM84ABP-H

pypi Weblate
High
10 months ago

Weblate has an arbitrary file read via symbolic links GSA_kwCzR0hTQS1nOTI1LWY3ODgtNGpoN84ABP-G

pypi Weblate
Moderate
10 months ago

Weblate has Systematic User and Project Enumeration via Broken Authorization in REST API (IDOR) GSA_kwCzR0hTQS0zcG1oLTI0d3AteHBmNM4ABPvK

pypi Weblate
Moderate
10 months ago

Weblate's over‑permissive webhook endpoint enables mass repository updates and component enumeration GSA_kwCzR0hTQS1wajg2LTI1OGgtcXJ2Zs4ABPvJ

pypi Weblate
Low
10 months ago

Weblate has improper validation upon invitation acceptance GSA_kwCzR0hTQS1tNmhxLWY0dzktcXJqas4ABPud

pypi Weblate
Low
11 months ago

Weblate leaks the IP of project member inviting user to be reviewer in Audit log GSA_kwCzR0hTQS1ncjM1LXZweDItcXhoY84ABOO9

pypi weblate
Low
about 1 year ago

Weblate has a long session expiry when verifying second factor GSA_kwCzR0hTQS0zNzdqLXdqMzgtNDcyOM4ABLqV

pypi Weblate
Low
over 1 year ago

Weblate exposes personal IP address via e-mail GSA_kwCzR0hTQS00cXFmLTltNWMtdzJjNc4ABJD1

pypi weblate
Moderate
over 1 year ago

Weblate lacks rate limiting when verifying second factor GSA_kwCzR0hTQS01N2pnLW05OTctY3gzcc4ABJD0

pypi weblate
Low
over 1 year ago

VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext GSA_kwCzR0hTQS1tNjdtLTNwNWctY3c5as4ABGyC

pypi weblate
Low
over 2 years ago

Weblate vulnerable to improper sanitization of project backups GSA_kwCzR0hTQS1qZmdwLTY3NHgtNnE0cM4AA9cu

pypi Weblate
Moderate
over 4 years ago

Weblate user account enumeration via reset password form GSA_kwCzR0hTQS1qMjRnLWdtNzYtajgyOc4AAb1V

pypi weblate
High
over 4 years ago

Improper Neutralization of Special Elements used in a Command ('Command Injection') in Weblate GSA_kwCzR0hTQS0zODcyLWY0OHAtcHhxas0wPw

pypi Weblate
Moderate
over 4 years ago

Cross-site Scripting in Weblate GSA_kwCzR0hTQS02anA2LTlyZjktZ2M2Ns0u1Q

pypi Weblate

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Moderate 21 Low 8 High 6 Critical 1