Most recent entries from all

CVE-2025-68398 — Weblate has git config file overwrite vulnerability that leads to remote code execution

2026-10-15T20:28:54.129957+00:00

Affected: WeblateOrg weblate

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to overwrite Git configuration remotely and override some of its behavior. Version 5.15.1 fixes the issue.

PYSEC-2026-571 — Weblate is vulnerable to RCE through Git config file overwrite

2026-10-15T20:28:54.130044+00:00

Affected: PyPI: weblate

### Impact

It was possible to overwrite Git configuration remotely and override some of its behavior.

### Resources

Thanks to Jason Marcello for responsible disclosure.