Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

tolgee vulnerabilities

6 published CVEs name tolgee among the affected products.

Newest CVEs

  • CVE-2026-32251

    Tolgee has an XXE Injection in Translation Import

    tolgee · tolgee-platform

    Critical9.3
  • CVE-2024-52297

    Tolgee's configuration all configuration properties leaked in public configuration DTO

    tolgee · tolgee-platform

    Critical9.8
  • CVE-2024-32470

    Tolgee' API keys created by server admin users bypass the permission check

    tolgee · tolgee-platform

    Medium6.5
  • CVE-2024-32466

    Tolgee's API key scopes not checked when querying translation data

    tolgee · tolgee-platform

    Low2.7
  • CVE-2023-41316

    HTML Injection with email in Tolgee

    tolgee · tolgee-platform

    Medium5.5
  • CVE-2023-38510

    Tolgee Lacks Permission Check for API Key for some endpoints

    tolgee · tolgee-platform

    High8.1