https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:26:40.227809+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-64326 CVE-2025-64326 — Weblate leaks the IP of project members inviting users to assume reviewer roles in Audit log 2026-10-07T18:26:40.229844+00:00

Affected: WeblateOrg weblate

Weblate is a web based localization tool. In versions 5.14 and below, Weblate leaks the IP address of the project member inviting the user to the project in the audit log. The audit log includes IP addresses from admin-triggered actions, which can be viewed by invited users. This issue is fixed in version 5.14.1.

 https://cve.radiocsirt.org/vuln/ghsa-gr35-vpx2-qxhc GHSA-gr35-vpx2-qxhc — Weblate leaks the IP of project member inviting user to be reviewer in Audit log 2026-10-07T18:26:40.229898+00:00

Affected: PyPI: weblate

### Summary Weblate leaks the IP address of the project member inviting the user to the project in the audit log.

### Details The audit log included IP addresses from admin-triggered actions, and those could be viewed by invited users.

### Impact

The inviting user's (admin's) IP address could be leaked to invited users.