Lucene search
+L

1 matches found

Hacker One
Hacker One
•added 2026/09/17 5:32 p.m.•6 views

Weblate: Incomplete VCS metadata exclusion: `.svn` / `.bzr` bypass CVE-2026-61792 due to missing `VCS_METADATA_DIRS` entries.

A translation management application contained incomplete VCS metadata exclusion in its ZIP download feature. The exclusion mechanism only covered Git and Mercurial metadata directories but failed to exclude Subversion and Bazaar metadata directories. This gap allowed Subversion and Bazaar metada...

7.7CVSS5.9AI score0.00586EPSS
SaveExploits0
Rows per page
Query Builder