Weblate has an arbitrary file read via symbolic links

概要

参考情報

• WeblateOrg/weblate security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-68279 · ADVISORY
• WeblateOrg/weblate#17331 · WEB
• WeblateOrg/weblate#17356 · WEB
• WeblateOrg/weblate · PACKAGE
• WeblateOrg/weblate release weblate-5.15.1 · WEB
• pypi.org/project/weblate · PACKAGE
• GitHub Advisory GHSA-g925-f788-4jh7 · ADVISORY

weblate のその他の脆弱性

• CVE-2026-55228高 8.1Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, the REST API did …
• CVE-2026-55227中 4.3Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather …
• CVE-2026-50127中 5.9Weblate is a web based localization tool. From version 5.15 to before version 2026.6, Weblate's VCS_RESTRICT_PRIVATE did not properly accoun…
• CVE-2026-45106中 4.6Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML wit…
• CVE-2026-44264中 4.3Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided conte…