Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

4 matching records.

1. 38
   CVE NVD 2h ago

   Wanderer is a self-hosted trail database for saving and sharing adventures.

   Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLIC_PRIVATE_INSTANCE is not set to true, the unauthenticated POST /api/v1/trail/download handler passes the attacker-controlled…

   CVSS 10.0 Fix available CVE-2026-71495 Open-Wanderer
2. 35
   CVE NVD 2h ago

   Wanderer is a self-hosted trail database for saving and sharing adventures.

   Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated local user can submit crafted waypoint.name and waypoint.icon values that the trail elevation graph interpolates into…

   CVSS 7.6 Fix available CVE-2026-62346 Open-Wanderer Developer platform
3. 35
   CVE NVD 2h ago

   Wanderer is a self-hosted trail database for saving and sharing adventures.

   Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated user can store a crafted waypoint.icon value that createMarkerFromWaypoint() passes into FontawesomeMarker, where…

   CVSS 7.6 Fix available CVE-2026-62345 Open-Wanderer Developer platform
4. 30
   CVE NVD 3h ago

   Wanderer is a self-hosted trail database for saving and sharing adventures.

   Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/{id} and GET /activitypub/comment/{id} endpoints call ActivitypubTrail() and…

   CVSS 7.5 Fix available CVE-2026-62344 Open-Wanderer

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Open-Wanderer&limit=100. RSS for this section: feed.xml.