CVE-2026-44264

4.3

MEDIUMCVSS v3

Published

May 7, 2026

Affected

4 projects

Assigned by

GitHub

Severity scale

010

Description

Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has been patched in version 5.17.1.

WeblateOrg/weblate

GitHubWeb based localization tool with tight version control integration.

< 5.17.1NVD

weblate

Python Package IndexA web-based continuous localization system with tight version control integration

< 5.17.1NVD

weblate

NPM

More on this CVE

NVD↗GitHub Advisory↗

New Born weblate: Best javascript library to load dynamic template

< 5.17.1NVD

weblate

RubyGems The API is accessible on the ``/api/`` URL and it is based on [Django REST framework](https://www.django-rest-framework.org/). The OpenAPI specification is available as feature preview, feedback welcome!

< 5.17.1NVD

Security Advisories

CVE-2026-44264

Description

More on this CVE