agentprime: mauriceboe-trekEvery new CVE for mauriceboe-trek.https://agentprime.io/CVE-2026-77293: TREK: Cross-user note-file deletion (IDOR / Broken Access Control)https://agentprime.io/advisories/CVE-2026-77293/https://agentprime.io/advisories/CVE-2026-77293/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 18:08:30 GMTCVECVE-2026-77320: TREK: Public trip share link ignores the `share_map` permission server-side (client-enforced authorization → itinerary/location disclosure)https://agentprime.io/advisories/CVE-2026-77320/https://agentprime.io/advisories/CVE-2026-77320/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 18:05:13 GMTCVECVE-2026-77321: TREK MCP trip summary bypasses delegated OAuth read scopeshttps://agentprime.io/advisories/CVE-2026-77321/https://agentprime.io/advisories/CVE-2026-77321/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 18:04:05 GMTCVECVE-2026-77294: TREK: Server-Side Request Forgery via User-Configurable LLM Base URLhttps://agentprime.io/advisories/CVE-2026-77294/https://agentprime.io/advisories/CVE-2026-77294/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 18:04:02 GMTCVECVE-2026-62945: TREK: Cross-trip reservation title disclosure via file linkshttps://agentprime.io/advisories/CVE-2026-62945/https://agentprime.io/advisories/CVE-2026-62945/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:51:19 GMTCVECVE-2026-54509: TREK IDOR: any authenticated user can read another user's journey share token (full journey leak)https://agentprime.io/advisories/CVE-2026-54509/https://agentprime.io/advisories/CVE-2026-54509/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:49:49 GMTCVECVE-2026-54508: TREK: Blind SSRF via unvalidated redirect-following in Google/Naver list import and Maps URL resolutionhttps://agentprime.io/advisories/CVE-2026-54508/https://agentprime.io/advisories/CVE-2026-54508/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:46:51 GMTCVECVE-2026-54505: TREK: Stored cross-user HTML injection via trip title in the Journey suggestion bannerhttps://agentprime.io/advisories/CVE-2026-54505/https://agentprime.io/advisories/CVE-2026-54505/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:44:50 GMTCVECVE-2026-45410: Time-based user enumeration in TREK authentication endpointhttps://agentprime.io/advisories/CVE-2026-45410/https://agentprime.io/advisories/CVE-2026-45410/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 21:23:01 GMTCVECVE-2026-40185: Missing Authorization on Immich Trip Photo Routes in TREKhttps://agentprime.io/advisories/CVE-2026-40185/https://agentprime.io/advisories/CVE-2026-40185/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 19:40:16 GMTCVECVE-2026-40184: Unauthenticated Access to Uploaded Files in TREKhttps://agentprime.io/advisories/CVE-2026-40184/https://agentprime.io/advisories/CVE-2026-40184/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 19:39:32 GMTCVE