Known Vulnerabilities for TREK by Mauriceboe
Listed below are 2 of the newest known vulnerabilities associated with "TREK" by "Mauriceboe".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85738 json | TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not recogni... | Not Provided | 2026-09-24 | 2026-09-28 |
| CVE-2026-78887 json | A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the com... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-78886 json | A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/ne... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-78885 json | A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the fi... | Not Provided | 2026-08-25 | 2026-08-27 |
| CVE-2026-78864 json | A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-78863 json | A vulnerability was found in liketrek TREK up to 3.0.22. Impacted is the function loginUser of the file server/src/services/a... | Not Provided | 2026-08-25 | 2026-08-27 |
| CVE-2026-77321 json | TREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in server/src/mcp/tools/trips.ts is registe... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-77320 json | TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns days... | Not Provided | 2026-09-24 | 2026-09-29 |
| CVE-2026-77294 json | TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llm... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-77293 json | TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endp... | Not Provided | 2026-09-24 | 2026-09-24 |