Open-Wanderer

4 CVEs in 1 Open-Wanderer product, including Wanderer. Newest: CVE-2026-71495 (2026-11-06). Severity, EPSS and public exploits for each.

Open-Wanderer products with known CVEs

ProductCVEs
Wanderer4
Open-Wanderer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-71495Critical10.02026-11-06Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLIC_PRIVATE_INSTANCE is not set to true, the unauthenticat…
CVE-2026-62346High7.62026-11-06Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated local user can submit crafted waypoint.name and w…
CVE-2026-62345High7.62026-11-06Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated user can store a crafted waypoint.icon value that…
CVE-2026-62344High7.52026-11-06Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/{id} and GET /activityp…