Skip to content
OpenAdvisories

Package · Ubuntu

wlc

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-42150

    wlc: print_html outputs API data without HTML escaping, enabling stored XSS

    wlc is a Weblate command-line client using Weblate's REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. This issue has be…

    WeblateOrg wlc wlc wlc Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2026-22251

    wlc may leak API keys due to an insecure API key configuration

    wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, wlc supported providing unscoped API keys in the setting. This practice was discouraged for years, but the code was never removed. This might cause the API key to be leaked to dif…

    WeblateOrg wlc wlc wlc Debian Ubuntu PyPI