triggerdotdev vulnerabilities

Newest CVEs

• CVE-2026-114093

  Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpoint

  triggerdotdev · trigger.dev

  Medium5.3
• CVE-2026-114092

  Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Action

  triggerdotdev · trigger.dev

  High8.3
• CVE-2026-114091

  Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure via API Replay Route

  triggerdotdev · trigger.dev

  Medium6.0
• CVE-2026-114089

  Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover

  triggerdotdev · trigger.dev

  High8.7
• CVE-2026-114088

  Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO

  triggerdotdev · trigger.dev

  High8.3
• CVE-2026-114087

  Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets

  triggerdotdev · trigger.dev

  Critical9.2
• CVE-2026-114086

  Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpoint

  triggerdotdev · trigger.dev

  Medium6.9
• CVE-2026-114085

  Trigger.dev through 4.7.6 Missing Authentication in Supervisor Workload API

  triggerdotdev · trigger.dev

  High8.8
• CVE-2026-114084

  Trigger.dev before 4.5.6 SQL Injection via tags in Realtime Runs API

  triggerdotdev · trigger.dev

  High8.3
• CVE-2026-114083

  Trigger.dev before 4.5.0-rc.3 Path Traversal via Packets Presigned URL Endpoints

  triggerdotdev · trigger.dev

  High8.6