Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-58352
6.5
MEDIUMCVSS v3
Published
September 5, 2025
Affected
4 projects
Assigned by
GitHub
Severity scale
010
Description
Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1.
WeblateOrg/weblate
GitHubWeb based localization tool with tight version control integration.
GitHubWeb based localization tool with tight version control integration.< 5.13.1NVD
weblatePython Package IndexA web-based continuous localization system with tight version control integration
Python Package IndexA web-based continuous localization system with tight version control integration< 5.13.1NVD
weblate
NPM
RubyGems