Skip to content
OpenAdvisories

Vendor

Wheels

11 known vulnerabilities.

Products

Wheels 9 Wheels CLI 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-111450

    Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts…

    Wheels Wheels
  • Medium 5.9
    CVE-2026-111449

    Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An…

    Wheels Wheels
  • Medium 6.5
    CVE-2026-111443

    Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, in…

    Wheels Wheels
  • Medium 5.0
    CVE-2026-110909

    Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the c…

    Wheels Wheels CLI