liketrek TREK

• CVE-2026-85738 Medium 6.3 TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4) 0.4%
• CVE-2026-78887 Low 3.7 liketrek TREK Journey Photo Proxy validateShareTokenForAsset authorization 0.5%
• CVE-2026-78886 Low 3.7 liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal 0.6%
• CVE-2026-78885 Medium 5.6 liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication 0.6%
• CVE-2026-78864 Medium 6.3 liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection 0.3%
• CVE-2026-78863 Medium 6.3 liketrek TREK Pre-2FA mfa_token authService.ts loginUser improper authentication 0.5%