CVE-2026-33440
Published
CVSS v3
5
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS setting applied only to the first issued requests and didn't restrict possible redirects. This issue has been fixed in version 5.17.
GitHub