CVE-2026-22250
Low · 2.5Weblate command-line client susceptible to SSL verification skip
CVSS
2.5
EPSS
0.2%
Published
Jan 12, 2026
CISA due date
—
The record
The SSL verification would be skipped for some crafted URLs.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | wlc | 0 | 1.17.0 |
Related vulnerabilities
- GHSA-2mmv-7rrp-g8xh Weblate command-line client susceptible to SSL verification skip Same vulnerability
- CVE-2026-23535 wlc is a Weblate command-line client using Weblate's REST API. Also affects wlc
- GHSA-mmwx-79f6-67jg Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command Also affects wlc
- GHSA-9rp8-h4g8-8766 Weblate wlc has insecure API key configuration Also affects wlc
- CVE-2026-22251 Weblate wlc has insecure API key configuration Also affects wlc
- CVE-2026-96375 Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the… CWE-295
- CVE-2026-87944 Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider… CWE-295
- CVE-2026-114642 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend… CWE-295