Products: 2
Vulnerabilities: 49
Known Exploited: 0
2
Critical Level Threats
11
High Level Threats
30
Medium Level Threats
6
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-86035
Weblate: Mercurial argument injection via repository filenames allows authenticated command execution
Last Modified: Oct 02, 2026
Published: Sep 29, 2026
CVE-2026-77573
Weblate: DNS rebinding in VCS operations allows server-side request forgery
Last Modified: Sep 01, 2026
Published: Aug 26, 2026
CVE-2026-77507
Weblate: Object-scoped RSS feeds disclose private change history to unauthorized users
Last Modified: Sep 01, 2026
Published: Aug 26, 2026
CVE-2026-62326
Weblate Has Uncontrolled Resource Consumption via
Last Modified: Sep 01, 2026
Published: Aug 26, 2026
CVE-2026-62249
Weblate: Restricted-component change history leaked to non-member project users through the nested `GET /api/projects/{slug}/changes/` endpoint
Last Modified: Sep 01, 2026
Published: Aug 26, 2026
Items Per Page
