CVE-2026-44264
Weblate is a web based localization tool.
Published May 7, 2026 · updated Jun 17, 2026 · weblate weblate
Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has been patched in version 5.17.1.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 7, 2026 · NIST NVD
Detected
Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has been patched in version 5.17.1.
Jun 17, 2026 · NIST NVD
Updated
Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has been patched in version 5.17.1.
Affected
- cpe weblate/weblateversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-44264
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-44264
Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has been patched in version 5.17.1.
nvd.nist.gov