Description
Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WeblateOrg | weblate | < 5.17 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | weblate | < 5.17 | 5.17 | GHSA-f8hv-g549-hwg2 |