https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:44:33.857633+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33440 CVE-2026-33440 — Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploads 2026-10-07T05:44:33.875584+00:00

Affected: WeblateOrg weblate

Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS setting applied only to the first issued requests and didn't restrict possible redirects. This issue has been fixed in version 5.17.