Open-wanderer vulnerabilities
We track 4 vulnerabilities in Open-wanderer products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
Latest Open-wanderer vulnerabilities
- 10.0 Critical severity
wanderer: Server-Side Request Forgery
Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLIC_PRIVATE_INSTANCE is not set to true, the unauthenticated POST /api/v1/trail/download handler passes the attacker-controlled JSON url field directly to even
- 7.6 High severity
wanderer: Improper Neutralization of Input During Web Page Generation
Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated local user can submit crafted waypoint.name and waypoint.icon values that the trail elevation graph interpolates into an innerHTML template in web/src
- 7.6 High severity
wanderer: Improper Neutralization of Input During Web Page Generation
Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated user can store a crafted waypoint.icon value that createMarkerFromWaypoint() passes into FontawesomeMarker, where insertAdjacentHTML inserts the unval
- 7.5 High severity
wanderer: Authorization Bypass Through User-Controlled Key
Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/{id} and GET /activitypub/comment/{id} endpoints call ActivitypubTrail() and ActivitypubComment() to return full trail and c