CVE-2026-85738

The collaborative travel planner TREK (prior to version 3.4.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) due to a flaw in the checkSsrf logic located in server/src/utils/ssrfGuard.ts. The application fails to recognize NAT64, 6to4, or Teredo IPv6 transition addresses that encode an I...