HIGH 7.7

PYSEC-2026-2313

상세

Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn't verify downloaded files, potentially following symlinks outside the repository. This issue has been fixed in version 5.17.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / weblate

최초 영향 버전: 0 수정 버전: 5.17

수정 pip install --upgrade 'weblate>=5.17'

참고

https://github.com/WeblateOrg/weblate/security/advisories/GHSA-hv99-mxm5-q397 [ADVISORY]
https://github.com/WeblateOrg/weblate/commit/5db3a2a2e047ecaab627a8731cd744a30b2f51d3 [FIX]