Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/16 9:8 p.m.11 views

Weblate: Prefix-Based Repository Boundary Check Bypass via Symlink/Junction Path Prefix Collision

Impact Weblate repository-boundary validation relies on string prefix checks on resolved absolute paths. In multiple code paths, the check uses startswith against the repository root path. This is not path-segment aware and can be bypassed when the external path shares the same string prefix as t...

5CVSS5.8AI score0.00324EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder