CVE-2025-61587

CVE-2025-61587 affects Weblate (web-based localization tool). Open redirect in versions 5.13.2 and below via the redir parameter when Weblate is configured with Anubis and REDIRECT_DOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects victims to attacker-controll...