https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:05:46 +0000 https://cve.radiocsirt.org/vuln/cve-2026-39845 <p><strong>Affected:</strong> WeblateOrg weblate</p> <p>Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround.</p> <p><strong>Affected:</strong> WeblateOrg weblate</p> <p>Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround.</p> https://cve.radiocsirt.org/vuln/cve-2026-39845 https://cve.radiocsirt.org/vuln/ghsa-f8hv-g549-hwg2 <p><strong>Affected:</strong> PyPI: Weblate</p> <p>### Impact The webhook add-on did not utilize existing SSRF protection.</p> <p>### Patches * https://github.com/WeblateOrg/weblate/pull/18815</p> <p>### Workarounds Disabling the add-on would avoid misusing this.</p> <p>### References Thanks to @Lihfdgjr for reporting this via GitHub.</p> <p><strong>Affected:</strong> PyPI: Weblate</p> <p>### Impact The webhook add-on did not utilize existing SSRF protection.</p> <p>### Patches * https://github.com/WeblateOrg/weblate/pull/18815</p> <p>### Workarounds Disabling the add-on would avoid misusing this.</p> <p>### References Thanks to @Lihfdgjr for reporting this via GitHub.</p> https://cve.radiocsirt.org/vuln/ghsa-f8hv-g549-hwg2