valhalla

Products

ProductCVEsExploitedLatest
valhalla2–Sep 17, 2026

Exploited and recent CVEs

  • CVE-2026-54716 High 7.5 Valhalla: Degenerate exclude_polygons (collinear points, zero area) causes OOM in /sources_to_targets 0.5%
  • CVE-2026-49294 Medium 6.1 Valhalla has reflected XSS via unsanitized JSONP callback parameter 0.1%