Weblate: Stored HTML injection in editor search preview

概要

参考情報

• WeblateOrg/weblate security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-45106 · ADVISORY
• WeblateOrg/weblate#19422 · WEB
• WeblateOrg/weblate commit 8b0adf1 · WEB
• WeblateOrg/weblate · PACKAGE
• WeblateOrg/weblate release weblate-2026.5 · WEB
• pypi.org/project/weblate · PACKAGE
• GitHub Advisory GHSA-6wxc-8mgq-w26m · ADVISORY

weblate のその他の脆弱性

• CVE-2026-55228高 8.1Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, the REST API did …
• CVE-2026-55227中 4.3Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather …
• CVE-2026-50127中 5.9Weblate is a web based localization tool. From version 5.15 to before version 2026.6, Weblate's VCS_RESTRICT_PRIVATE did not properly accoun…
• CVE-2026-44264中 4.3Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided conte…
• CVE-2026-44263中 4.3Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeratio…