Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler,...
CVE-2026-114081
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which concatenates window-f
#advisory
共收录 22948 条相关情报。
← 返回所有主题Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders...
CVE-2026-114082
Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write acc
Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and...
CVE-2026-114083
Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints
Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor...
CVE-2026-114085
Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in...
CVE-2026-114078
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTask
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of...
CVE-2026-114079
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs...
CVE-2026-114084
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, which concatenates t
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows...
CVE-2026-114076
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in...
CVE-2026-114077
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 that resol
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of...
CVE-2026-114075
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted us
The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its...
CVE-2026-114072
The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack
Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes...
CVE-2026-114073
Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret v
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows...
CVE-2026-114074
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members
Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard...
CVE-2026-114070
Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that
Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1...
CVE-2026-114069
Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvar
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows...
CVE-2026-114071
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to co
Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token...
CVE-2026-114068
Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows
Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows...
CVE-2026-114065
Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows authenticated users to read other
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing...
CVE-2026-114064
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows su
Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT...
CVE-2026-114067
Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint