Skip to content
CVE PROGRAM SOURCE RECORD1.0 Low

CVE-2025-64725

Weblate has improper validation upon invitation acceptance

Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WeblateOrg weblate

  • < 5.15affected

References