WE
Product
Weblate
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 21Low 2
Watch
Add Weblate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34393 | 8.8 | Apr 15 | Weblate: Privilege escalation in the user API endpoint Affected: before 5.17 |
| CVE-2022-23915 | 8.8 | Mar 4 | The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution (RCE) via argument injection when using git or mercurial repositories Affected: before 4.11.1 |
| CVE-2026-41654 | 8.1 | May 7 | Weblate is Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url Affected: before 5.17.1 |
| CVE-2026-33435 | 8.0 | Apr 15 | Weblate: Remote code execution during backup restoration Affected: before 5.17 |
| CVE-2026-34242 | 7.7 | Apr 15 | Weblate: Arbitrary File Read via Symlink Affected: before 5.17 |
| CVE-2026-21889 | 7.5 | Jan 14 | Weblate leaks information via screenshots Affected: before 5.15.2 |
| CVE-2025-32021 | 7.5 | Apr 15 | Weblate is a web based localization tool Affected: before 5.11 |
Showing 7