Vulnerabilities

TI-2026-58832 CVE-2026-85738

TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)

MEDIUM 61

TREK is a collaborative travel planner.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00385 Published 2026-09-24 Fixed in 3.4.0 CWE-918

TI-2026-54719 CVE-2026-78887 · GHSA-j7mw-g2xq-7xfh

LOW 28

A weakness has been identified in liketrek TREK up to 3.0.22.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00463 Published 2026-08-25 Fixed in 3.1.0 CWE-285

TI-2026-54718 CVE-2026-78886 · GHSA-pw55-389h-h6rh

LOW 29

A security flaw has been discovered in liketrek TREK up to 3.0.22.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0058 Published 2026-08-25 Fixed in 3.1.0 CWE-22

TI-2026-54717 CVE-2026-78885 · GHSA-q5wr-f3rq-qfcg

LOW 29

A vulnerability was identified in liketrek TREK up to 3.0.22.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00581 Published 2026-08-25 Fixed in 3.1.0 CWE-287

TI-2026-54716 CVE-2026-78864 · GHSA-6fxv-j57x-3hv8

LOW 24

A vulnerability was determined in liketrek TREK up to 3.0.22.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00333 Published 2026-08-25 Fixed in 3.1.0 CWE-74

TI-2026-54715 CVE-2026-78863 · GHSA-x6rr-9jxr-vqvg

LOW 25

A vulnerability was found in liketrek TREK up to 3.0.22.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00507 Published 2026-08-25 Fixed in 3.1.0 CWE-287