Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

tolgee vulnerabilities

6 published CVEs name tolgee among the affected products.

Published CVEs
6
Last 12 months
1
Critical
2
Known exploited
0

Critical 2High 1Medium 2Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20232
  2. 20243
  3. 20261

Newest CVEs

  • CVE-2026-32251

    Tolgee has an XXE Injection in Translation Import

    tolgee · tolgee-platform

    Critical9.3
  • CVE-2024-52297

    Tolgee's configuration all configuration properties leaked in public configuration DTO

    tolgee · tolgee-platform

    Critical9.8
  • CVE-2024-32470

    Tolgee' API keys created by server admin users bypass the permission check

    tolgee · tolgee-platform

    Medium6.5
  • CVE-2024-32466

    Tolgee's API key scopes not checked when querying translation data

    tolgee · tolgee-platform

    Low2.7
  • CVE-2023-41316

    HTML Injection with email in Tolgee

    tolgee · tolgee-platform

    Medium5.5
  • CVE-2023-38510

    Tolgee Lacks Permission Check for API Key for some endpoints

    tolgee · tolgee-platform

    High8.1