CVE-2026-22250: Weblate command-line client susceptible to SSL verification skip

January 12, 2026

The SSL verification would be skipped for some crafted URLs.

References

github.com/WeblateOrg/wlc
github.com/WeblateOrg/wlc/commit/a513864ec4daad00146e6d6e039559726e256fa3
github.com/WeblateOrg/wlc/pull/1097
github.com/WeblateOrg/wlc/security/advisories/GHSA-2mmv-7rrp-g8xh
github.com/advisories/GHSA-2mmv-7rrp-g8xh
nvd.nist.gov/vuln/detail/CVE-2026-22250

Code Behaviors & Features

Detect and mitigate CVE-2026-22250 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →