CVE-2026-55228
2 advisories.
PyPI/weblate CVE-2026-55228: high 8.1, EPSS 0.45%
Weblate has IDOR in GroupViewSet that allows authenticated project manager to gain unauthorized read access to any private project
Action: Upgrade weblate to 2026.7 or later.
pip install weblate==2026.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.7 | - |
Fixed versions
| 2026.7 |
Sources
- osv: GHSA-2q2q-jr9g-v9rf
- https://github.com/WeblateOrg/weblate/security/advisories/GHSA-2q2q-jr9g-v9rf
- https://nvd.nist.gov/vuln/detail/CVE-2026-55228
- https://github.com/WeblateOrg/weblate/pull/19970
- https://github.com/WeblateOrg/weblate/commit/19babc99b05f2cc299b5090f90f79d8181f25d79
- https://github.com/WeblateOrg/weblate
CVE-2026-55228 · published · modified · JSON
PyPI/weblate CVE-2026-55228: high 8.1, EPSS 0.45%
Weblate has IDOR in GroupViewSet that allows authenticated project manager to gain unauthorized read access to any private project
Action: Upgrade weblate to 2026.7 or later.
pip install weblate==2026.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.7 | - |
Fixed versions
| 2026.7 |
Sources
- osv: PYSEC-2026-3942
- https://github.com/WeblateOrg/weblate/security/advisories/GHSA-2q2q-jr9g-v9rf
- https://nvd.nist.gov/vuln/detail/CVE-2026-55228
- https://github.com/WeblateOrg/weblate/pull/19970
- https://github.com/WeblateOrg/weblate/commit/19babc99b05f2cc299b5090f90f79d8181f25d79
- https://github.com/WeblateOrg/weblate
- https://pypi.org/project/weblate
- https://github.com/advisories/GHSA-2q2q-jr9g-v9rf
CVE-2026-55228 · published · modified · JSON