Vulnerabilities

TI-2026-86059 CVE-2026-71495

Server-side request forgery in Wanderer trail download endpoint

MEDIUM 43

Wanderer is a self-hosted trail database for saving and sharing adventures.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00336 Published 2026-11-06 Fixed in 0.20.0 CWE-918

TI-2026-86058 CVE-2026-62346

LOW 33

Wanderer is a self-hosted trail database for saving and sharing adventures.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00253 Published 2026-11-06 Fixed in 0.19.3 CWE-79

TI-2026-86057 CVE-2026-62345

LOW 33

Wanderer is a self-hosted trail database for saving and sharing adventures.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00261 Published 2026-11-06 Fixed in 0.19.3 CWE-79

TI-2026-86052 CVE-2026-62344

LOW 33

Wanderer is a self-hosted trail database for saving and sharing adventures.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00277 Published 2026-11-06 Fixed in 0.19.3 CWE-639