https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:21:52.872468+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-22250 CVE-2026-22250 — wlc can skip SSL verification 2026-10-03T14:21:52.913366+00:00

Affected: WeblateOrg wlc

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted URLs. This vulnerability is fixed in 1.17.0.

 https://cve.radiocsirt.org/vuln/ghsa-2mmv-7rrp-g8xh GHSA-2mmv-7rrp-g8xh — Weblate command-line client susceptible to SSL verification skip 2026-10-03T14:21:52.913426+00:00

Affected: PyPI: wlc

### Impact The SSL verification would be skipped for some crafted URLs.

### Patches * https://github.com/WeblateOrg/wlc/pull/1097

### Workarounds Avoid using untrusted wlc configurations, as that might cause insecure connections.

### References This issue was reported to us by [wh1zee](https://hackerone.com/wh1zee) via HackerOne.