Security Advisory

CVE-2026-33440

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-15 18:15:12

Last updated 2026-04-15 18:49:25

Assigner GitHub_M

CVSS score 5.0

State PUBLISHED

Description

Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS setting applied only to the first issued requests and didn't restrict possible redirects. This issue has been fixed in version 5.17.

← Browse all CVEs View on cve.org ↗