11 matches found
EUVD-2025-203462
Weblate has a Server-Side Request Forgery issue...
PYSEC-2025-231
Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...
CVE-2025-66407
Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...
PT-2025-51337
Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.15 Description Weblate is a web-based localization tool. The Create Component functionality allows authorized users to add new translation components by specifying a version control system and a source code reposito...
EUVD-2022-7173
Malicious code in bioql PyPI...
GLSA-202210-14 : Gitea: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202210-14 Gitea: Multiple Vulnerabilities - Cross-site Scripting XSS - Stored in GitHub repository go-gitea/gitea prior to 1.16.9. CVE-2022-1928 - An attacker may cause a denial of service by crafting an Accept-Language header whi...
GHSA-W8XW-7CRF-H23X Gitea vulnerable to Argument Injection
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled...
CVE-2022-42968
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled...
Command injection
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled...
CVE-2022-42968
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled...
gitea -- multiple issues
The Gitea team reports: Sanitize and Escape refs in git backend Bump golang.org/x/text Update bluemonday...