Headline
GHSA-2mmv-7rrp-g8xh: Weblate command-line client susceptible to SSL verification skip
Impact
The SSL verification would be skipped for some crafted URLs.
Patches
- https://github.com/WeblateOrg/wlc/pull/1097
Workarounds
Avoid using untrusted wlc configurations, as that might cause insecure connections.
References
This issue was reported to us by wh1zee via HackerOne.
Skip to content
Navigation Menu
AI CODE CREATION
GitHub CopilotWrite better code with AI
GitHub SparkBuild and deploy intelligent apps
GitHub ModelsManage and compare prompts
MCP RegistryNewIntegrate external tools
View all features
- Pricing
Provide feedback
Saved searches****Use saved searches to filter your results more quickly
Sign up
Appearance settings
- GitHub Advisory Database
- GitHub Reviewed
- CVE-2026-22250
Weblate command-line client susceptible to SSL verification skip
Low severity GitHub Reviewed Published Jan 12, 2026 in WeblateOrg/wlc • Updated Jan 12, 2026
Affected versions
< 1.17.0
Description
Published to the GitHub Advisory Database
Jan 12, 2026
Last updated
Jan 12, 2026
EPSS score