https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:14:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-291674 EUVD-2026-291674 https://cve.radiocsirt.org/vuln/euvd-2026-291674 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33220 <p>Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn&#39;t perform proper access control. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable this feature as the CDN add-on is not enabled by default.</p> <p>Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn&#39;t perform proper access control. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable this feature as the CDN add-on is not enabled by default.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33220 https://cve.radiocsirt.org/vuln/ghsa-mqph-7h49-hqfm <p><strong>Affected:</strong> PyPI: Weblate</p> <p>### Impact The translation memory API exposed unintended endpoints, which in turn didn&#39;t do proper access control.</p> <p>### Patches * https://github.com/WeblateOrg/weblate/pull/18516</p> <p>### Workarounds The CDN add-on is not enabled by default.</p> <p>### References Thanks to @spbavarva for reporting this responsibly via GitHub.</p> <p><strong>Affected:</strong> PyPI: Weblate</p> <p>### Impact The translation memory API exposed unintended endpoints, which in turn didn&#39;t do proper access control.</p> <p>### Patches * https://github.com/WeblateOrg/weblate/pull/18516</p> <p>### Workarounds The CDN add-on is not enabled by default.</p> <p>### References Thanks to @spbavarva for reporting this responsibly via GitHub.</p> https://cve.radiocsirt.org/vuln/ghsa-mqph-7h49-hqfm https://cve.radiocsirt.org/vuln/pysec-2026-153 <p><strong>Affected:</strong> PyPI: weblate</p> <p>Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn&#39;t perform proper access control. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable this feature as the CDN add-on is not enabled by default.</p> <p><strong>Affected:</strong> PyPI: weblate</p> <p>Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn&#39;t perform proper access control. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable this feature as the CDN add-on is not enabled by default.</p> https://cve.radiocsirt.org/vuln/pysec-2026-153