https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:36:14.528150+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-264139 EUVD-2026-264139 2026-10-09T16:36:14.530720+00:00 EUVD-2026-264139 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68279 fkie_cve-2025-68279 2026-10-09T16:36:14.530752+00:00

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-g925-f788-4jh7 GHSA-g925-f788-4jh7 — Weblate has an arbitrary file read via symbolic links 2026-10-09T16:36:14.530782+00:00

Affected: PyPI: Weblate

### Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository.

### Resources

Thanks to Jason Marcello for responsible disclosure.

 https://cve.radiocsirt.org/vuln/pysec-2026-2040 PYSEC-2026-2040 — Weblate has an arbitrary file read via symbolic links 2026-10-09T16:36:14.530806+00:00

Affected: PyPI: weblate

### Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository.

### Resources

Thanks to Jason Marcello for responsible disclosure.