Most recent entries from all

EUVD-2026-265427

fkie_cve-2026-22250

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted URLs. This vulnerability is fixed in 1.17.0.

GHSA-2mmv-7rrp-g8xh — Weblate command-line client susceptible to SSL verification skip

Affected: PyPI: wlc

### Impact The SSL verification would be skipped for some crafted URLs.

### Patches * https://github.com/WeblateOrg/wlc/pull/1097

### Workarounds Avoid using untrusted wlc configurations, as that might cause insecure connections.

### References This issue was reported to us by [wh1zee](https://hackerone.com/wh1zee) via HackerOne.

PYSEC-2026-2051 — Weblate command-line client susceptible to SSL verification skip

Affected: PyPI: wlc

### Impact The SSL verification would be skipped for some crafted URLs.

### Patches * https://github.com/WeblateOrg/wlc/pull/1097

### Workarounds Avoid using untrusted wlc configurations, as that might cause insecure connections.

### References This issue was reported to us by [wh1zee](https://hackerone.com/wh1zee) via HackerOne.

UBUNTU-CVE-2026-22250

Affected: Ubuntu:Pro:18.04:LTS: wlc, Ubuntu:Pro:20.04:LTS: wlc, Ubuntu:Pro:22.04:LTS: wlc, Ubuntu:Pro:24.04:LTS: wlc, Ubuntu:25.10: wlc, Ubuntu:26.04:LTS: wlc

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted URLs. This vulnerability is fixed in 1.17.0.