Skip to content
OpenAdvisories

Vendor

tolgee

6 known vulnerabilities.

Products

tolgee-platform 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-32251

    Tolgee has an XXE Injection in Translation Import

    Tolgee is an open-source localization platform. Prior to 3.166.3, the XML parsers used for importing Android XML resources (.xml) and .resx files don't disable external entity processing. An authenticated user who can import translation files into a project c…

    tolgee tolgee-platform
  • Critical 9.8
    CVE-2024-52297

    Tolgee's configuration all configuration properties leaked in public configuration DTO

    Tolgee is an open-source localization platform. Tolgee 3.81.1 included the all configuration properties in the PublicConfiguratioDTO publicly exposed to users. This vulnerability is fixed in v3.81.2.

    tolgee tolgee-platform