EUVD-2026-118397

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, an authenticated local user can submit crafted waypoint.name and waypoint.icon values that the trail elevation graph interpolates into an innerHTML template in...

CVE-2026-62346

The Wanderer self-hosted trail database (prior to version 0.19.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) . An authenticated local user can submit malicious waypoint.name and waypoint.icon values which are interpolated into an innerHTML template in web/src/lib/vendor/maplibre-elevatio...