open-wanderer vulnerabilities
4 published CVEs name open-wanderer among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-71495
Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access
open-wanderer · wanderer
Critical10.0 - CVE-2026-62346
Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML
open-wanderer · wanderer
High7.6 - CVE-2026-62345
Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)
open-wanderer · wanderer
High7.6 - CVE-2026-62344
Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints
open-wanderer · wanderer
High7.5