PYSEC-2026-2051
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/wlc/PYSEC-2026-2051.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-2051
- Aliases
- Published
- 2026-07-07T16:03:18Z
- Modified
- 2026-07-07T17:46:16Z
- Severity
-
- 2.5 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N CVSS Calculator
- Summary
- Weblate command-line client susceptible to SSL verification skip
- Details
-
Impact
The SSL verification would be skipped for some crafted URLs.
Patches
Workarounds
Avoid using untrusted wlc configurations, as that might cause insecure connections.
References
This issue was reported to us by wh1zee via HackerOne.
- References
-
- https://github.com/WeblateOrg/wlc/security/advisories/GHSA-2mmv-7rrp-g8xh
- https://nvd.nist.gov/vuln/detail/CVE-2026-22250
- https://github.com/WeblateOrg/wlc/pull/1097
- https://github.com/WeblateOrg/wlc/commit/a513864ec4daad00146e6d6e039559726e256fa3
- https://github.com/WeblateOrg/wlc
- https://pypi.org/project/wlc
- https://github.com/advisories/GHSA-2mmv-7rrp-g8xh
Affected packages
PyPI / wlc
Package
- Name
- wlc
- View open source insights on deps.dev
- Purl
- pkg:pypi/wlc
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.17.0