Open-wanderer Wanderer vulnerabilities
- open-wanderer wandererWanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access10.0 Critical
- open-wanderer wandererWanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML7.6 High
- open-wanderer wandererStored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)7.6 High
- open-wanderer wandererWanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints7.5 High