Weblate vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-58352LowWeblate: Weblate has a long session expiry when verifying second factor CVE-2025-49134Lowweblate: Weblate exposes personal IP address via e-mail CVE-2025-47951Mediumweblate: Weblate lacks rate limiting when verifying second factor CVE-2025-32021Lowweblate: VCS credentials included in URL parameters are potentially logged and saved into browser history as…CVE-2024-39303LowWeblate: Weblate vulnerable to improper sanitization of project backups CVE-2017-5537Mediumweblate: Weblate user account enumeration via reset password form CVE-2022-23915HighWeblate: Improper Neutralization of Special Elements used in a Command ('Command Injection') in Weblate CVE-2022-24710MediumWeblate: Cross-site Scripting in Weblate

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo