Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-68279
7.7
HIGHCVSS v3
Published
December 18, 2025
Affected
4 projects
Assigned by
GitHub
Severity scale
010
Description
Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.
WeblateOrg/weblate
GitHubWeb based localization tool with tight version control integration.
GitHubWeb based localization tool with tight version control integration.< 5.15.1NVD
weblatePython Package IndexA web-based continuous localization system with tight version control integration
Python Package IndexA web-based continuous localization system with tight version control integration< 5.15.1NVD
weblate
NPM
RubyGems