Description
Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS setting applied only to the first issued requests and didn't restrict possible redirects. This issue has been fixed in version 5.17.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WeblateOrg | weblate | < 5.17 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | weblate | < 5.17 | 5.17 | GHSA-5fhx-9jwj-867m |