Libretranslate
Approved changes feed: RSS · Atom
cpe:2.3:a:libretranslate:libretranslate:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Libretranslate (357cdd9d-3c58-5cb9-a2e2-e34b83a2de8f) |
|---|---|
| Product | Libretranslate (f0dcaa3e-a9d3-508a-982d-7295809833cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-92803 |
vulnerable | 2026-10-13 12:28:53.495863 |
LibreTranslate through 1.9.6 Missing Access Check on the download_file Route
MEDIUM (5.3)
LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access to translated files. Attackers can bypass API key requirements and abuse ban lists to download files without authentication on protected instances.
Published: 2026-09-16T20:32:53.271Z
Updated: 2026-09-17T14:59:25.192Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57942 |
vulnerable | 2026-07-29 01:03:16.430080 |
LibreTranslate - IP Spoofing via X-Forwarded-For Header
MEDIUM (5.3)
LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function that allows unauthenticated attackers to spoof client IP addresses by injecting arbitrary values into the X-Forwarded-For header without trusted proxy validation. Attackers can bypass per-IP rate limiting and flood bans by supplying forged addresses in the X-Forwarded-For header to enable unlimited API abuse.
Published: 2026-06-29T17:17:09.639Z
Updated: 2026-11-08T14:06:35.583Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.