GHSA-2mmv-7rrp-g8xh

Weblate command-line client susceptible to SSL verification skip

Source: GitHub Advisory Database (reviewed) Low CVE-2026-22250

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	wlc	< 1.17.0	1.17.0

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact The SSL verification would be skipped for some crafted URLs. ### Patches * https://github.com/WeblateOrg/wlc/pull/1097 ### Workarounds Avoid using untrusted wlc configurations, as that might cause insecure connections. ### References This issue was reported to us by [wh1zee](https://hackerone.com/wh1zee) via HackerOne.

References

External links from the advisory. They lead to third-party sites.

https://github.com/WeblateOrg/wlc/security/advisories/GHSA-2mmv-7rrp-g8xh web
https://nvd.nist.gov/vuln/detail/CVE-2026-22250 advisory
https://github.com/WeblateOrg/wlc/pull/1097 web
https://github.com/WeblateOrg/wlc/commit/a513864ec4daad00146e6d6e039559726e256fa3 web
https://github.com/WeblateOrg/wlc package