PyPI/weblate CVE-2026-44264: medium 4.3, EPSS 0.27%

Weblate vulnerable to XSS via crafted Markdown

Action: Upgrade weblate to 5.17.1 or later.

pip install weblate==5.17.1

Affected

Fixed versions

Sources

• osv: GHSA-5cmv-3rc4-7279
• https://github.com/WeblateOrg/weblate/security/advisories/GHSA-5cmv-3rc4-7279
• https://nvd.nist.gov/vuln/detail/CVE-2026-44264
• https://github.com/WeblateOrg/weblate/pull/19259
• https://github.com/WeblateOrg/weblate/commit/85abc9df88b7464f4c0e794aef752e45f4230f75
• https://github.com/WeblateOrg/weblate
• https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.17.1

CVE-2026-44264 · published 2026-05-07T00:04:26Z · modified 2026-07-13T07:26:44.300035145Z · JSON