296,748
Total vulnerabilities in the database
The verification of the second factor had too long a session expiry. The long session expiry could be used to circumvent rate limiting of the second factor.
This issue has been addressed in Weblate 5.13.1 via https://github.com/WeblateOrg/weblate/pull/16002.
Thanks to Nahid Hasan Limon for reporting this issue responsibly.