https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 23:18:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-265735 EUVD-2026-265735 https://cve.radiocsirt.org/vuln/euvd-2026-265735 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21889 <p>Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.</p> <p>Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-21889 https://cve.radiocsirt.org/vuln/ghsa-3g2f-4rjg-9385 <p><strong>Affected:</strong> PyPI: weblate</p> <p>### Impact The screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename.</p> <p>### Patches * https://github.com/WeblateOrg/weblate/pull/17516</p> <p>### References</p> <p>Thanks to Lukas May and Michael Leu for reporting this.</p> <p><strong>Affected:</strong> PyPI: weblate</p> <p>### Impact The screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename.</p> <p>### Patches * https://github.com/WeblateOrg/weblate/pull/17516</p> <p>### References</p> <p>Thanks to Lukas May and Michael Leu for reporting this.</p> https://cve.radiocsirt.org/vuln/ghsa-3g2f-4rjg-9385 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10240-1 <p>weblate-5.16-1.1 on GA media</p> <p>weblate-5.16-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10240-1 https://cve.radiocsirt.org/vuln/pysec-2026-2037 <p><strong>Affected:</strong> PyPI: weblate</p> <p>### Impact The screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename.</p> <p>### Patches * https://github.com/WeblateOrg/weblate/pull/17516</p> <p>### References</p> <p>Thanks to Lukas May and Michael Leu for reporting this.</p> <p><strong>Affected:</strong> PyPI: weblate</p> <p>### Impact The screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename.</p> <p>### Patches * https://github.com/WeblateOrg/weblate/pull/17516</p> <p>### References</p> <p>Thanks to Lukas May and Michael Leu for reporting this.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2037