TREK
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 10, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)
TREK: Cross-user note-file deletion (IDOR / Broken Access Control)
TREK: Public trip share link ignores the `share_map` permission server-side (client-enforced authorization → itinerary/location disclosure)
TREK MCP trip summary bypasses delegated OAuth read scopes
TREK: Server-Side Request Forgery via User-Configurable LLM Base URL
TREK: Stored cross-user HTML injection via trip title in the Journey suggestion banner
Unauthenticated Access to Uploaded Files in TREK
Monitor TREK in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.