Vulnerabilities

TI-2026-24780 CVE-2026-32251

Tolgee has an XXE Injection in Translation Import

HIGH 79

Tolgee is an open-source localization platform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00457 Published 2026-03-12 Fixed in 3.166.3 CWE-611

TI-2024-34972 CVE-2024-52297

MEDIUM 50

Tolgee is an open-source localization platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00601 Published 2024-11-12 Fixed in 3.81.2 CWE-200

TI-2024-21365 CVE-2024-32470

LOW 30

Tolgee is an open-source localization platform.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00556 Published 2024-04-18 Fixed in 3.57.4 CWE-863

TI-2024-21361 CVE-2024-32466

LOW 20

Tolgee is an open-source localization platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0036 Published 2024-04-18 Fixed in 3.57.2 CWE-862

TI-2023-21916 CVE-2023-41316

MEDIUM 58

Tolgee is an open-source localization platform.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0048 Published 2023-09-07 Fixed in 3.29.2 CWE-20

TI-2023-19890 CVE-2023-38510

LOW 38

Tolgee is an open-source localization platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00605 Published 2023-07-27 Fixed in 3.23.1 CWE-862