trigger.dev vulnerabilities (npm)
10 vulnerabilities.
-
trigger.devnpm Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logs 6.8 Medium -
trigger.devnpm Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint 5.3 Medium -
trigger.devnpm Trigger.dev before 4.5.6 Cross-Tenant SQL Injection via TSQL Window-Function Name 8.3 High -
trigger.devnpm Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpoint 6.9 Medium -
trigger.devnpm Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets 9.2 Critical -
trigger.devnpm Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO 8.3 High -
trigger.devnpm Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URL 5.3 Medium -
trigger.devnpm Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR) 7.1 High -
trigger.devnpm Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replay 8.4 High -
trigger.devnpm Trigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channel 5.3 Medium