CVE-2026-50127
2 advisories.
PyPI/weblate CVE-2026-50127: medium 5.9, EPSS 0.47%
Weblate SSRF: outbound URL guard misses some private ranges
Action: Upgrade weblate to 2026.6 or later.
pip install weblate==2026.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.15 | 2026.6 | - |
Fixed versions
| 2026.6 |
Sources
- osv: GHSA-vmfc-9982-2m45
- https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vmfc-9982-2m45
- https://nvd.nist.gov/vuln/detail/CVE-2026-50127
- https://github.com/WeblateOrg/weblate/pull/19768
- https://github.com/WeblateOrg/weblate
- https://github.com/WeblateOrg/weblate/releases/tag/weblate-2026.6
CVE-2026-50127 · published · modified · JSON
PyPI/weblate CVE-2026-50127: medium 5.9, EPSS 0.47%
Weblate SSRF: outbound URL guard misses some private ranges
Action: Upgrade weblate to 2026.6 or later.
pip install weblate==2026.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.15 | 2026.6 | - |
Fixed versions
| 2026.6 |
Sources
- osv: PYSEC-2026-3416
- https://github.com/WeblateOrg/weblate/security/advisories/GHSA-vmfc-9982-2m45
- https://nvd.nist.gov/vuln/detail/CVE-2026-50127
- https://github.com/WeblateOrg/weblate/pull/19768
- https://github.com/WeblateOrg/weblate
- https://github.com/WeblateOrg/weblate/releases/tag/weblate-2026.6
- https://pypi.org/project/weblate
- https://github.com/advisories/GHSA-vmfc-9982-2m45
CVE-2026-50127 · published · modified · JSON