Visit Website →

Recent Items

fkie_cve-2026-39845

Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround.

GHSA-f8hv-g549-hwg2 — Weblate: SSRF via the webhook add-on using unprotected fetch_url()

Affected: PyPI: Weblate

### Impact The webhook add-on did not utilize existing SSRF protection.

### Patches * https://github.com/WeblateOrg/weblate/pull/18815

### Workarounds Disabling the add-on would avoid misusing this.

### References Thanks to @Lihfdgjr for reporting this via GitHub.

PYSEC-2026-156

Affected: PyPI: weblate

Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround.