Open-Wanderer Wanderer
4 CVEs affecting Open-Wanderer Wanderer. Latest disclosed: 2026-11-06. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-71495 | Critical | 10.0 | 2026-11-06 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLIC_PRIVATE_INSTANCE is not set to true, the unauthenticat… |
CVE-2026-62346 | High | 7.6 | 2026-11-06 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated local user can submit crafted waypoint.name and w… |
CVE-2026-62345 | High | 7.6 | 2026-11-06 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated user can store a crafted waypoint.icon value that… |
CVE-2026-62344 | High | 7.5 | 2026-11-06 | Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/{id} and GET /activityp… |