PyPI/weblate CVE-2026-44263: medium 4.3, EPSS 0.34%
Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. Thi
Action: Upgrade weblate to 5.17.1 or later.
pip install weblate==5.17.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.17.1 | - |
Fixed versions
| 5.17.1 |
Sources
- osv: PYSEC-2026-2318
- https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.17.1
- https://github.com/WeblateOrg/weblate/commit/6cf892c7bd50b667a65a99d716a90694f7d9f203
- https://github.com/WeblateOrg/weblate/pull/19258
- https://github.com/WeblateOrg/weblate/security/advisories/GHSA-gcg5-86jr-f7jg
CVE-2026-44263 · published · modified · JSON