PyPI/weblate CVE-2026-55227: medium 4.3, EPSS 0.32%

Private Weblate projects vulnerable to observable object existence disclosure via globally scoped object lookups

Action: Upgrade weblate to 2026.7 or later.

pip install weblate==2026.7

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3941
• https://github.com/WeblateOrg/weblate/security/advisories/GHSA-2p9g-x3cv-5hh4
• https://nvd.nist.gov/vuln/detail/CVE-2026-55227
• https://github.com/WeblateOrg/weblate/pull/19971
• https://github.com/WeblateOrg/weblate/commit/836bc082803d49d02f2831ec8339268eb66bcdae
• https://github.com/WeblateOrg/weblate
• https://github.com/WeblateOrg/weblate/releases/tag/weblate-2026.7
• https://pypi.org/project/weblate
• https://github.com/advisories/GHSA-2p9g-x3cv-5hh4

CVE-2026-55227 · published 2026-09-10T09:44:58.552741Z · modified 2026-09-10T12:15:15.561506130Z · JSON