https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:31:19.824209+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-252067 EUVD-2026-252067 2026-10-06T22:31:19.829473+00:00 EUVD-2026-252067 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58352 fkie_cve-2025-58352 2026-10-06T22:31:19.829513+00:00

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1.

 https://cve.radiocsirt.org/vuln/ghsa-377j-wj38-4728 GHSA-377j-wj38-4728 — Weblate has a long session expiry when verifying second factor 2026-10-06T22:31:19.829547+00:00

Affected: PyPI: Weblate

### Impact The verification of the second factor had too long a session expiry. The long session expiry could be used to circumvent rate limiting of the second factor.

### Patches This issue has been addressed in Weblate 5.13.1 via https://github.com/WeblateOrg/weblate/pull/16002.

### References Thanks to Nahid Hasan Limon for reporting this issue responsibly.

 https://cve.radiocsirt.org/vuln/pysec-2026-2036 PYSEC-2026-2036 — Weblate has a long session expiry when verifying second factor 2026-10-06T22:31:19.829575+00:00

Affected: PyPI: weblate

### Impact The verification of the second factor had too long a session expiry. The long session expiry could be used to circumvent rate limiting of the second factor.

### Patches This issue has been addressed in Weblate 5.13.1 via https://github.com/WeblateOrg/weblate/pull/16002.

### References Thanks to Nahid Hasan Limon for reporting this issue responsibly.