Weblate: >> Weblate >> 5.15 Security Vulnerabilities
Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.
CVSS Score
7.5
EPSS Score
0.0
Published
2026-01-14
Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to overwrite Git configuration remotely and override some of its behavior. Version 5.15.1 fixes the issue.
CVSS Score
9.1
EPSS Score
0.002
Published
2025-12-18
Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.
CVSS Score
7.7
EPSS Score
0.001
Published
2025-12-18