TREK
A self-hosted travel/trip planner with real-time collaboration, interactive maps, PWA support, SSO, budgets, packing lists, and more
Alternative to: tripit, wanderlog


v3.0.18
2026-05-10⚠️ Security release — update recommended
This release patches a security vulnerability. If you are running any version prior to v3.0.18, updating is recommended.
A security advisory will be published shortly. In the meantime, see PR #984 for technical details.
How to update: https://github.com/mauriceboe/TREK/wiki/Updating
What’s Changed
Security
- fix(security): equalise login response timing to prevent user enumeration via timing side-channel (CWE-203, CWE-208) — [#984](https://github.com/mauriceboe/TREK/pull/984) by @jubnl
Bug fixes
- fix: align public share itinerary order with daily planner — [#983](https://github.com/mauriceboe/TREK/issues/983) / [#985](https://github.com/mauriceboe/TREK/pull/985)
- fix: shift owner vacancy entries when
update_tripmoves the trip window — [#983](https://github.com/mauriceboe/TREK/issues/983)
Full Changelog: https://github.com/mauriceboe/TREK/compare/v3.0.17…v3.0.18