Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:22:20 +0000 EUVD-2026-309259 https://cve.radiocsirt.org/vuln/euvd-2026-309259 EUVD-2026-309259 https://cve.radiocsirt.org/vuln/euvd-2026-309259 fkie_cve-2026-42150 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42150 <p>wlc is a Weblate command-line client using Weblate&#39;s REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. This issue has been patched in version 2.0.0.</p> <p>wlc is a Weblate command-line client using Weblate&#39;s REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. This issue has been patched in version 2.0.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42150 GHSA-gx2m-mcc2-r4p3 — wlc: print_html outputs API data without HTML escaping https://cve.radiocsirt.org/vuln/ghsa-gx2m-mcc2-r4p3 <p><strong>Affected:</strong> PyPI: wlc</p> <p>### Impact The HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser.</p> <p>### Patches * https://github.com/WeblateOrg/wlc/pull/1327</p> <p>### Workarounds The only vulnerable code path is HTML output which is opt-in.</p> <p>### References Weblate thanks @fg0x0 for reporting this on GitHub.</p> <p><strong>Affected:</strong> PyPI: wlc</p> <p>### Impact The HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser.</p> <p>### Patches * https://github.com/WeblateOrg/wlc/pull/1327</p> <p>### Workarounds The only vulnerable code path is HTML output which is opt-in.</p> <p>### References Weblate thanks @fg0x0 for reporting this on GitHub.</p> https://cve.radiocsirt.org/vuln/ghsa-gx2m-mcc2-r4p3 PYSEC-2026-2321 https://cve.radiocsirt.org/vuln/pysec-2026-2321 <p><strong>Affected:</strong> PyPI: wlc</p> <p>wlc is a Weblate command-line client using Weblate&#39;s REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. This issue has been patched in version 2.0.0.</p> <p><strong>Affected:</strong> PyPI: wlc</p> <p>wlc is a Weblate command-line client using Weblate&#39;s REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. This issue has been patched in version 2.0.0.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2321 UBUNTU-CVE-2026-42150 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42150 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: wlc, Ubuntu:Pro:20.04:LTS: wlc, Ubuntu:Pro:22.04:LTS: wlc, Ubuntu:Pro:24.04:LTS: wlc, Ubuntu:25.10: wlc, Ubuntu:26.04:LTS: wlc</p> <p>wlc is a Weblate command-line client using Weblate&#39;s REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. This issue has been patched in version 2.0.0.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: wlc, Ubuntu:Pro:20.04:LTS: wlc, Ubuntu:Pro:22.04:LTS: wlc, Ubuntu:Pro:24.04:LTS: wlc, Ubuntu:25.10: wlc, Ubuntu:26.04:LTS: wlc</p> <p>wlc is a Weblate command-line client using Weblate&#39;s REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. This issue has been patched in version 2.0.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42150