← Back

Trek

trek

Vendor: Mauriceboe • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Mauriceboe
1Trek
Jun 17, 2026
Apr 10, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.
1Mauriceboe
1Trek
Jun 17, 2026
Apr 10, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requiring authentication. This vulnerability is fixed in 2.7.2.