WeblateOrg wlc vulnerabilities

Newest CVEs

• CVE-2026-62364

  wlc may disclose API tokens to project-configured URLs

  WeblateOrg · wlc

  Low2.3
• CVE-2026-42150

  wlc: print_html outputs API data without HTML escaping, enabling stored XSS

  WeblateOrg · wlc

  Medium5.1
• CVE-2026-23535

  wlc Path traversal: Unsanitized API slugs in download command

  WeblateOrg · wlc

  High8.1
• CVE-2026-22251

  wlc may leak API keys due to an insecure API key configuration

  WeblateOrg · wlc

  Medium5.3
• CVE-2026-22250

  wlc can skip SSL verification

  WeblateOrg · wlc

  Low2.5