WE
Product
weblate
37
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 3High 8Medium 23Low 4
Watch
Add weblate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77573 | 3.5 | Aug 26 | Weblate: DNS rebinding in VCS operations allows server-side request forgery Affected: < 2026.8 |
| CVE-2026-77508 | 3.5 | Aug 26 | Weblate: Unverified REST API email changes Affected: < 2026.8 |
| CVE-2025-64326 | 3.5 | Nov 6 | Weblate leaks the IP of project members inviting users to assume reviewer roles in Audit log Affected: < 5.14.1 |
| CVE-2026-33212 | 3.1 | Apr 15 | Weblate: Improper access control for pending tasks in API Affected: < 5.17 |
Showing 4