Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/16 8:45 p.m.15 views

Weblate: SSRF via the webhook add-on using unprotected fetch_url()

Impact The webhook add-on did not utilize existing SSRF protection. Patches https://github.com/WeblateOrg/weblate/pull/18815 Workarounds Disabling the add-on would avoid misusing this. References Thanks to @Lihfdgjr for reporting this via GitHub...

4.1CVSS5.8AI score0.00275EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder