CVE-2026-23535

creationtimestamp| type| source ---|---|--- 2026-01-16 20:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mckvbclzfw2t 2026-01-24 21:24:12+00:00| seen| https://gist.github.com/alon710/06a718f906cedb00a1e00cfb38a77644 2026-01-24 22:29:33+00:00| seen|...

CVE-2026-23535

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instructed by a crafted server. This vulnerability is fixed in 1.17.2...

CVE-2026-23535 wlc Path traversal: Unsanitized API slugs in download command

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instructed by a crafted server. This vulnerability is fixed in 1.17.2...