weblate vulnerabilities

A web-based continuous localization system with tight version control integration

5.14.1

10 years ago

21 hours ago

Known vulnerabilities in the weblate package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Insufficient Session Expiration	[,5.13.1)
L Brute Force	[,5.12.1)
L Exposure of Private Personal Information to an Unauthorized Actor	[,5.12.1)
L Use of GET Request Method With Sensitive Query Strings	[0,5.11)
L External Control of File Name or Path	[4.14,5.6.2)
M Information Exposure	[,4.18)
M Insufficient Session Expiration	[,2.14)
H Denial of Service (DoS)	[,2.14)
M User Interface (UI) Misrepresentation of Critical Information	[,2.14)
M Cross-site Request Forgery (CSRF)	[,4.3)
M CSV Injection	[,2.14)
M Cross-site Scripting (XSS)	[,2.14)
M Allocation of Resources Without Limits or Throttling	[,4.14.2)
H Remote Code Execution (RCE)	[0,4.11.1)
M Cross-site Scripting (XSS)	[,4.11)
M Information Exposure	[,2.10.1)

154 VERSIONS IN TOTAL See all versions