PyPI weblate

Name: PyPI weblate
Brand: PyPI

ProduktUS

pkg:pypi/weblate

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

KEV-gelistet

EPSS ≥ 10%

ungepatcht

nach Schweregrad

3critical4high9medium1low

aktualisiert 2026-10-28

Schwachstellen (38)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2026-24126US	critical9.1	0.52% (44th)	Exploit	5.16.0	2026-02-19	2 Versionen
CVE-2022-23915US	high8.8	3.10% (88th)	—	4.11.1	2022-03-04	< 4.11.1
CVE-2017-5537US	medium5.3	2.31% (83rd)	—	2.10.1	2017-03-15	< 2.10.1
CVE-2025-68398US	critical9.1	0.79% (56th)	—	5.15.1	2025-12-18	< 5.15.1
CVE-2022-24710US	medium5.4	0.75% (55th)	—	4.11	2022-02-25	< 4.11
CVE-2026-33435US	—	0.71% (53rd)	—	5.17	2026-04-15	< 5.17
CVE-2026-34242US	—	0.46% (40th)	—	5.17	2026-04-15	< 5.17
CVE-2026-55228US	—	0.45% (39th)	—	2026.7	2026-08-26	< 2026.7
CVE-2025-68279US	medium6.5	0.41% (35th)	—	5.15.1	2025-12-18	< 5.15.1
CVE-2025-61587US	medium6.1	0.39% (33rd)	—	5.13.3	2025-10-01	< 5.13.3
CVE-2026-34393US	—	0.39% (33rd)	—	5.17	2026-04-15	< 5.17
CVE-2026-21889US	high7.5	0.39% (33rd)	—	5.15.2	2026-01-14	< 5.15.2
CVE-2025-32021US	high7.5	0.38% (32nd)	—	5.11	2025-04-15	< 5.11
CVE-2026-41654US	high8.1	0.37% (31st)	—	5.17.1	2026-05-07	< 5.17.1
CVE-2025-64725US	critical9.8	0.35% (28th)	—	5.15	2025-12-15	< 5.15
CVE-2026-27457US	—OT erhöht	0.35% (28th)	—	5.16.1	2026-02-26	< 5.16.1
CVE-2026-44263US	—	0.34% (27th)	—	5.17.1	2026-05-07	< 5.17.1
CVE-2026-55227US	—	0.32% (25th)	—	2026.7	2026-08-26	< 2026.7
CVE-2026-40256US	—	0.32% (25th)	—	5.17	2026-04-15	< 5.17
CVE-2026-33220US	—	0.32% (25th)	—	5.17	2026-04-15	< 5.17
CVE-2025-49134US	medium5.3	0.32% (25th)	—	5.12	2025-06-16	< 5.12
CVE-2024-39303US	medium5.4	0.32% (25th)	—	5.6.2	2024-07-01	4.14 → 5.6.2
CVE-2026-50127US	—	0.31% (23rd)	—	2026.6	2026-06-10	5.15 → 2026.6
CVE-2025-58352US	medium6.5	0.29% (21st)	—	5.13.1	2025-09-05	< 5.13.1
CVE-2026-44264US	—	0.27% (20th)	—	5.17.1	2026-05-07	< 5.17.1
CVE-2026-39845US	—	0.27% (20th)	—	5.17	2026-04-15	< 5.17
CVE-2025-67715US	—	0.27% (19th)	—	5.15	2025-12-16	< 5.15
CVE-2026-41519US	medium5.4	0.27% (19th)	—	5.17.1	2026-05-07	< 5.17.1
CVE-2025-47951US	—	0.27% (18th)	—	5.12	2025-06-16	< 5.12
CVE-2025-67492US	—	0.26% (17th)	—	5.15	2025-12-16	< 5.15
CVE-2026-34244US	—	0.25% (17th)	—	5.17	2026-04-15	< 5.17
CVE-2025-66407US	medium5.0	0.24% (15th)	—	5.15	2025-12-16	< 5.15
CVE-2026-33440US	—	0.24% (15th)	—	5.17	2026-04-15	< 5.17
CVE-2026-33214US	—OT erhöht	0.24% (15th)	—	5.17	2026-04-15	< 5.17
CVE-2026-33212US	—	0.22% (13th)	—	5.17	2026-04-15	< 5.17
CVE-2026-45106US	—	0.21% (11th)	—	2026.5	2026-06-10	< 2026.5
CVE-2025-64326US	low3.5	0.20% (10th)	—	5.14.1	2025-11-06	< 5.14.1
CVE-2022-24727US	—	—	—	4.11.1	2022-03-04	< 4.11.1

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-918Server-Side Request Forgery (SSRF)6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-284Improper Access Control3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-203Observable Discrepancy2 CVEs

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

USOSV.dev38 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan