Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2026-34393

Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5.17.

VectorNETWORK

PublishedApr 15, 2026, 19:16

Published Bysecurity-advisories@github.com

Base Score

Score8.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

weblate(PyPI)05.17N/A

References

https://github.com/WeblateOrg/weblate/pull/18687
https://github.com/WeblateOrg/weblate/security/advisories/GHSA-3382-gw9x-477v

Weakness Type

CWE-269

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK