CVE-2025-49134

5.3

MEDIUMCVSS v3

Published

June 16, 2025

Affected

4 projects

Assigned by

GitHub

Severity scale

010

Description

Weblate is a web based localization tool. Prior to version 5.12, the audit log notifications included the full IP address of the acting user. This could be obtained by third-party servers such as SMTP relays, or spam filters. This issue has been patched in version 5.12.

WeblateOrg/weblate

GitHubWeb based localization tool with tight version control integration.

< 5.12NVD

weblate

Python Package IndexA web-based continuous localization system with tight version control integration

< 5.12NVD

weblate

NPM

More on this CVE

NVD↗GitHub Advisory↗

New Born weblate: Best javascript library to load dynamic template

< 5.12NVD

weblate

RubyGems The API is accessible on the ``/api/`` URL and it is based on [Django REST framework](https://www.django-rest-framework.org/). The OpenAPI specification is available as feature preview, feedback welcome!

< 5.12NVD

Security Advisories

CVE-2025-49134

Description

More on this CVE