Ttolgee

Products

Exploited and recent CVEs

• CVE-2026-32251 Critical 9.3 Tolgee has an XXE Injection in Translation Import 0.4%
• CVE-2024-52297 Critical 9.8 Tolgee's configuration all configuration properties leaked in public configuration DTO 0.6%
• CVE-2024-32470 Medium 6.5 Tolgee' API keys created by server admin users bypass the permission check 0.6%
• CVE-2024-32466 Low 2.7 Tolgee's API key scopes not checked when querying translation data 0.4%
• CVE-2023-41316 Medium 5.5 HTML Injection with email in Tolgee 0.5%
• CVE-2023-38510 High 8.1 Tolgee Lacks Permission Check for API Key for some endpoints 0.6%