agentprime: weblateEvery new CVE for weblate.https://agentprime.io/CVE-2026-86035: Weblate: Mercurial argument injection via repository filenames allows authenticated command executionhttps://agentprime.io/advisories/CVE-2026-86035/https://agentprime.io/advisories/CVE-2026-86035/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 14:58:20 GMTCVECVE-2026-77573: Weblate: DNS rebinding in VCS operations allows server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-77573/https://agentprime.io/advisories/CVE-2026-77573/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 20:48:48 GMTCVECVE-2026-77507: Weblate: Object-scoped RSS feeds disclose private change history to unauthorized usershttps://agentprime.io/advisories/CVE-2026-77507/https://agentprime.io/advisories/CVE-2026-77507/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 20:45:23 GMTCVECVE-2026-62326: Weblate Has Uncontrolled Resource Consumption viahttps://agentprime.io/advisories/CVE-2026-62326/https://agentprime.io/advisories/CVE-2026-62326/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 20:36:25 GMTCVECVE-2026-62249: Weblate: Restricted-component change history leaked to non-member project users through the nested `GET /api/projects/{slug}/changes/` endpointhttps://agentprime.io/advisories/CVE-2026-62249/https://agentprime.io/advisories/CVE-2026-62249/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 20:29:49 GMTCVECVE-2026-61792: Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)https://agentprime.io/advisories/CVE-2026-61792/https://agentprime.io/advisories/CVE-2026-61792/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 20:26:27 GMTCVECVE-2026-61790: Weblate: Team-enforced 2FA is bypassed for global permissionshttps://agentprime.io/advisories/CVE-2026-61790/https://agentprime.io/advisories/CVE-2026-61790/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 20:23:53 GMTCVECVE-2026-77508: Weblate: Unverified REST API email changeshttps://agentprime.io/advisories/CVE-2026-77508/https://agentprime.io/advisories/CVE-2026-77508/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 19:56:59 GMTCVE