Vulnerabilidades em triggerdotdev

37 resultados
Análise Vexday

O Trigger.dev apresenta 6 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando exposição recente significativa. Embora nenhuma esteja sob exploração ativa conhecida, uma é classificada como crítica e a fraqueza dominante (CWE-22: Improper Limitation of a Pathname) sugere risco de acesso não autorizado a recursos. O padrão de divulgação concentrado em curto prazo recomenda revisão urgente de atualizações de segurança.

CVE-2026-114091MEDIUMTrigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure via API Replay RouteEPSS 0.3%CVE-2026-114080MEDIUMTrigger.dev before 4.5.2 Blind SSRF via Alert-Channel Webhook URLEPSS 0.3%CVE-2026-114082HIGHTrigger.dev before 4.6.2 Overly Broad Realtime Session Stream CredentialsEPSS 0.3%CVE-2026-114076MEDIUMTrigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URLEPSS 0.3%CVE-2026-92773HIGHTrigger.dev before 4.6.0 GitHub App Installation TakeoverEPSS 0.3%CVE-2026-114075MEDIUMTrigger.dev before 4.5.12 Authorization Bypass via Alert Channels APIEPSS 0.3%CVE-2026-114067HIGHTrigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session RouteEPSS 0.3%CVE-2026-114079MEDIUMTrigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel EndpointEPSS 0.3%CVE-2026-114070MEDIUMTrigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session RecordsEPSS 0.3%CVE-2026-114071LOWTrigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete RouteEPSS 0.3%CVE-2026-114066HIGHTrigger.dev before 4.7.0 Missing Authorization via Batch parentRunId WaitpointsEPSS 0.3%CVE-2026-114073MEDIUMTrigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment LogsEPSS 0.2%CVE-2026-114089HIGHTrigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT TakeoverEPSS 0.2%CVE-2026-114093MEDIUMTrigger.dev before 4.5.6 Cross-Site Request Forgery via /logout EndpointEPSS 0.2%CVE-2026-114085HIGHTrigger.dev through 4.7.6 Missing Authentication in Supervisor Workload APIEPSS 0.2%CVE-2026-73657MEDIUMTrigger.dev: Cross-tenant payload poisoning via packet write + replayEPSS 0.2%CVE-2026-114072MEDIUMTrigger.dev before 4.5.12 CSRF via Slack OAuth Callback StateEPSS 0.1%