Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-21889
7.5
HIGHCVSS v3
Published
January 14, 2026
Affected
4 projects
Assigned by
GitHub
Severity scale
010
Description
Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.
WeblateOrg/weblate
GitHubWeb based localization tool with tight version control integration.
GitHubWeb based localization tool with tight version control integration.< 5.15.2NVD
weblatePython Package IndexA web-based continuous localization system with tight version control integration
Python Package IndexA web-based continuous localization system with tight version control integration< 5.15.2NVD
weblate
NPM
RubyGems