vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process

CVE-2026-100722

## Summary An untrusted script run by `VM.run` can construct an embedder-exposed host function that returns a rejected

历史摘要 · 未重新核验 · GitHub Advisory

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

CVE-2026-100723

## Summary When an application explicitly exposes Node's `zlib` module through vm2's `NodeVM` builtin allowlist, an unt

历史摘要 · 未重新核验 · GitHub Advisory

GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

CVE-2026-103921

## Impact `buildWSLegacyExecutor()` in `@graphql-tools/executor-legacy-ws` previously hardcoded `rejectUnauthorized: fa

历史摘要 · 未重新核验 · GitHub Advisory

GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`

CVE-2026-104852

Closed by https://github.com/ardatan/graphql-tools/pull/8423 Mitigated in Hive Gateway by https://github.com/graphql-hiv

历史摘要 · 未重新核验 · GitHub Advisory

Snowflake drivers writes sensitive information to logs

CVE-2026-86597

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers

历史摘要 · 未重新核验 · GitHub Advisory

probe-image-size: Quadratic-time Denial of Service in the SVG Parser

CVE-2026-104861

## Overview `probe-image-size` scans the SVG header with a searching regular expression, `/]*>/`. On input that contain

历史摘要 · 未重新核验 · GitHub Advisory

@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

CVE-2026-19481

### Impact Versions of `@fastify/busboy` from 1.0.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The multi

历史摘要 · 未重新核验 · GitHub Advisory

@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary

CVE-2026-19484

### Impact Versions of `@fastify/busboy` from 3.1.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The vendo

历史摘要 · 未重新核验 · GitHub Advisory

@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

CVE-2026-10032

### Summary The `openUrl` function in `@a2ui/web_core` passes an agent-controlled URL directly to `window.open()` witho

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values

Affected version: trigger.dev 4.5.3 (4.5.6 was advertised by the CLI but was not tested). A staging dry-run executed wi

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: Cross-environment deployment cancel

### Summary Trigger.dev isolates each project into multiple **environments** (`dev`, `staging`, `prod`, and per-PR `pre

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name

### Summary A cross-tenant SQL injection in the TSQL query compiler lets **any authenticated trigger.dev customer read

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: Unauthenticated Realtime Stream Data Injection via Run FriendlyId

## Summary The POST handler for `/realtime/v1/streams/:runId/:streamId` has no authentication. Any entity that knows or

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise

## Summary Self-hosted trigger.dev v4 instances deployed using the provided Docker Compose configuration with default s

历史摘要 · 未重新核验 · GitHub Advisory

figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width

CVE-2026-96780

### Impact A denial-of-service (infinite loop) can occur in `text()` / `textSync()` when **both**: - `whitespaceBreak: t

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: V1 coordinator default-secret unauth Socket.IO

## TL;DR The /coordinator Socket.IO namespace mounts on every webapp boot and authenticates with a default secret ("coo

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: Blind SSRF via alert-channel webhook

### Summary A WEBHOOK alert channel stores a user-supplied `url`. When an alert fires (deployment/run failure, error gr

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)

### Summary The run replay `action` function at `apps/webapp/app/routes/resources.taskruns.$runParam.replay.ts` has no

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL

### Summary A project member can create a webhook alert channel whose delivery URL points at an internal address, and tr

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write)

### Summary The dashboard replay action authorizes the source run (it must belong to the caller's org), but the target e

历史摘要 · 未重新核验 · GitHub Advisory