wlc vulnerabilities
CVEs whose affected-version data names the wlc package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-62364Low· 2.3wlc is a Weblate command-line client using Weblate's REST API
wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discovered configuration from .weblate, .weblate.ini, or weblate.ini can select the API URL while an unscoped API token is supplied through WLC_…
▾ SunlitWeblateOrg · wlcEPSS 0.08%via NVD
CVE-2026-42150Medium· 5.1wlc: print_html outputs API data without HTML escaping
wlc: print_html outputs API data without HTML escaping
▾ Sunlitwlc · wlcEPSS 0.17%via OSV
CVE-2026-23535High· 8.0Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command
Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command
▾ Twilightwlc · wlcEPSS 0.39%via OSV
CVE-2026-22251Medium· 5.3Weblate wlc has insecure API key configuration
Weblate wlc has insecure API key configuration
▾ Sunlitwlc · wlcEPSS 0.19%via OSV
CVE-2026-22250Low· 2.5Weblate command-line client susceptible to SSL verification skip
Weblate command-line client susceptible to SSL verification skip
▾ Sunlitwlc · wlcEPSS 0.15%via OSV