https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:08:46.770172+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-64725 CVE-2025-64725 — Weblate has improper validation upon invitation acceptance 2026-10-03T08:08:46.807163+00:00

Affected: WeblateOrg weblate

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

 https://cve.radiocsirt.org/vuln/ghsa-m6hq-f4w9-qrjj GHSA-m6hq-f4w9-qrjj — Weblate has improper validation upon invitation acceptance 2026-10-03T08:08:46.807263+00:00

Affected: PyPI: Weblate

### Impact

It was possible to accept an invitation opened by a different Weblate user.

### Patches

* https://github.com/WeblateOrg/weblate/pull/16913

### Workarounds

Users should avoid leaving Weblate sessions with an unattended opened invitation.

### References

Thanks to Nahid0x for responsibly disclosing this vulnerability to Weblate.