Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote...
CVE-2026-114093
Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out aut
2026-10-21 归档
今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the...
CVE-2026-114090
Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp serv
Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay...
CVE-2026-114091
Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay route without scoping the
Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler...
CVE-2026-114092
Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler of the dashboard run rep
Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI...
CVE-2026-114089
Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because
Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from...
CVE-2026-114087
Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.examp
Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator...
CVE-2026-114088
Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that
Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams...
CVE-2026-114086
Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POST handler that allow
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler,...
CVE-2026-114081
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which concatenates window-f
Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders...
CVE-2026-114082
Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write acc
Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and...
CVE-2026-114083
Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints
Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor...
CVE-2026-114085
Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in...
CVE-2026-114078
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTask
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of...
CVE-2026-114079
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs...
CVE-2026-114084
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, which concatenates t
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in...
CVE-2026-114077
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 that resol
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of...
CVE-2026-114075
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted us
The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its...
CVE-2026-114072
The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack
Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes...
CVE-2026-114073
Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret v
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows...
CVE-2026-114074
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members