https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 20:48:08 +0000 https://cve.radiocsirt.org/vuln/cve-2025-68279 <p><strong>Affected:</strong> WeblateOrg weblate</p> <p>Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.</p> <p><strong>Affected:</strong> WeblateOrg weblate</p> <p>Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2025-68279 https://cve.radiocsirt.org/vuln/ghsa-g925-f788-4jh7 <p><strong>Affected:</strong> PyPI: Weblate</p> <p>### Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository.</p> <p>### Resources</p> <p>Thanks to Jason Marcello for responsible disclosure.</p> <p><strong>Affected:</strong> PyPI: Weblate</p> <p>### Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository.</p> <p>### Resources</p> <p>Thanks to Jason Marcello for responsible disclosure.</p> https://cve.radiocsirt.org/vuln/ghsa-g925-f788-4jh7