GHSA-3872-f48p-pxqj

High

Advisory

Published 4 Mar 2022In the index since 8 Sept 2026

Improper Neutralization of Special Elements used in a Command ('Command Injection') in Weblate

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
weblatepypi	3.11.3, 4.2.2	4.11.1	2

OSV records: GHSA-3872-f48p-pxqj PYSEC-2022-162 PYSEC-2022-31
Also known as: BIT-weblate-2022-23915, CVE-2022-23915, CVE-2022-24727, GHSA-h2g5-2rhx-ffgj, SNYK-PYTHON-WEBLATE-2414088

3 by stars

Chart

Latest

Affected images

Radar Score

weblatedeliveryhero

1 of the 3 container images this version deploys carry GHSA-3872-f48p-pxqj.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	weblate@4.2.2	4.11.1

7,984

weblatehelm-charts-nr

1 of the 3 container images this version deploys carry GHSA-3872-f48p-pxqj.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	weblate@4.2.2	4.11.1

7,984

1 of the 2 container images this version deploys carry GHSA-3872-f48p-pxqj.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	weblate@3.11.3	4.11.1

8,694

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
weblate/weblate :4.2.2-1	69c160d37a3c	weblate@4.2.2 weblate@4.2.2	4.11.1 4.11.1	2
weblate/weblate :3.11.3-1	82848df56ecd	weblate@3.11.3 weblate@3.11.3	4.11.1 4.11.1	1