Skip to content

CVE record · 1 source

CVE-2026-71495

CVSS 10.0

Wanderer is a self-hosted trail database for saving and sharing adventures.

Vendor: Open-Wanderer
Product: wanderer
CVSS v3.1: 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
Weakness: CWE-918

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

38

CVE NVD 2h ago

Wanderer is a self-hosted trail database for saving and sharing adventures.

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLIC_PRIVATE_INSTANCE is not set to true, the unauthenticated POST /api/v1/trail/download handler passes the attacker-controlled…

CVSS 10.0 Fix available CVE-2026-71495 Open-Wanderer