Browse all 4 CVE security advisories affecting open-wanderer. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-71495 | Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access — wanderer CWE-918 | 10.0 | Critical | 2026-11-06 |
| CVE-2026-62346 | Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML — wanderer CWE-79 | 7.6 | High | 2026-11-06 |
| CVE-2026-62345 | Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML) — wanderer CWE-79 | 7.6 | High | 2026-11-06 |
| CVE-2026-62344 | Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints — wanderer CWE-639 | 7.5 | High | 2026-11-06 |
This page lists every published CVE security advisory associated with open-wanderer. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.