Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 16:36:04 +0000 EUVD-2026-264139 https://cve.radiocsirt.org/vuln/euvd-2026-264139 EUVD-2026-264139 https://cve.radiocsirt.org/vuln/euvd-2026-264139 fkie_cve-2025-68279 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68279 <p>Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.</p> <p>Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-68279 GHSA-g925-f788-4jh7 — Weblate has an arbitrary file read via symbolic links https://cve.radiocsirt.org/vuln/ghsa-g925-f788-4jh7 <p><strong>Affected:</strong> PyPI: Weblate</p> <p>### Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository.</p> <p>### Resources</p> <p>Thanks to Jason Marcello for responsible disclosure.</p> <p><strong>Affected:</strong> PyPI: Weblate</p> <p>### Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository.</p> <p>### Resources</p> <p>Thanks to Jason Marcello for responsible disclosure.</p> https://cve.radiocsirt.org/vuln/ghsa-g925-f788-4jh7 PYSEC-2026-2040 — Weblate has an arbitrary file read via symbolic links https://cve.radiocsirt.org/vuln/pysec-2026-2040 <p><strong>Affected:</strong> PyPI: weblate</p> <p>### Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository.</p> <p>### Resources</p> <p>Thanks to Jason Marcello for responsible disclosure.</p> <p><strong>Affected:</strong> PyPI: weblate</p> <p>### Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository.</p> <p>### Resources</p> <p>Thanks to Jason Marcello for responsible disclosure.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2040