CVE-2026-34242

CVE-2026-34242CVE-2026-34242

weblate / weblate

Description

Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn't verify downloaded files, potentially following symlinks outside the repository. This issue has been fixed in version 5.17.

Scoring

CVSS 7.7 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Last modified2026-10-26
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.