weblate-fedora-messaging (0.10.0), wlhosted (2024.11.0) potentially affected by CVE-2026-45106 via weblate (5.13.3)

weblate PYPI version 5.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on weblate and may be impacted: - weblate-fedora-messaging 0.10.0 - wlhosted 2024.11.0 Source cves: CVE-2026-45106 Source advisory: OSV:PYSEC-2026-3415...

wlhosted (2025.1.0) potentially affected by CVE-2026-45106 via weblate (5.16.2)

weblate PYPI version 5.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on weblate and may be impacted: - wlhosted 2025.1.0 Source cves: CVE-2026-45106 Source advisory: OSV:PYSEC-2026-3415...

SUSE CVE-2026-45106

Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML without escaping. Any contributor whose content reaches those fields stores HTML and CSS that runs inside the authenticated editor of every user who runs a...

CVE-2026-45106 Weblate: Stored HTML injection in editor search preview

Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML without escaping. Any contributor whose content reaches those fields stores HTML and CSS that runs inside the authenticated editor of every user who runs a...