Vulnerabilities in open-wanderer

4 results

CVE-2026-62344HIGHWanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub EndpointsEPSS —CVE-2026-71495CRITICALWanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network AccessEPSS —CVE-2026-62345HIGHStored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)EPSS —CVE-2026-62346HIGHWanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTMLEPSS —