agentprime: triggerdotdev-trigger-devEvery new CVE for triggerdotdev-trigger-dev.https://agentprime.io/CVE-2026-114093: Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpointhttps://agentprime.io/advisories/CVE-2026-114093/https://agentprime.io/advisories/CVE-2026-114093/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:57 GMTCVECVE-2026-114092: Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Actionhttps://agentprime.io/advisories/CVE-2026-114092/https://agentprime.io/advisories/CVE-2026-114092/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:56 GMTCVECVE-2026-114091: Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure via API Replay Routehttps://agentprime.io/advisories/CVE-2026-114091/https://agentprime.io/advisories/CVE-2026-114091/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:56 GMTCVECVE-2026-114089: Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeoverhttps://agentprime.io/advisories/CVE-2026-114089/https://agentprime.io/advisories/CVE-2026-114089/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:54 GMTCVECVE-2026-114085: Trigger.dev through 4.7.6 Missing Authentication in Supervisor Workload APIhttps://agentprime.io/advisories/CVE-2026-114085/https://agentprime.io/advisories/CVE-2026-114085/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:52 GMTCVECVE-2026-114084: Trigger.dev before 4.5.6 SQL Injection via tags in Realtime Runs APIhttps://agentprime.io/advisories/CVE-2026-114084/https://agentprime.io/advisories/CVE-2026-114084/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:51 GMTCVECVE-2026-114083: Trigger.dev before 4.5.0-rc.3 Path Traversal via Packets Presigned URL Endpointshttps://agentprime.io/advisories/CVE-2026-114083/https://agentprime.io/advisories/CVE-2026-114083/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:50 GMTCVECVE-2026-114082: Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentialshttps://agentprime.io/advisories/CVE-2026-114082/https://agentprime.io/advisories/CVE-2026-114082/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:49 GMTCVECVE-2026-114080: Trigger.dev before 4.5.2 Blind SSRF via Alert-Channel Webhook URLhttps://agentprime.io/advisories/CVE-2026-114080/https://agentprime.io/advisories/CVE-2026-114080/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:48 GMTCVECVE-2026-114078: Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookuphttps://agentprime.io/advisories/CVE-2026-114078/https://agentprime.io/advisories/CVE-2026-114078/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:47 GMTCVECVE-2026-114077: Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV4https://agentprime.io/advisories/CVE-2026-114077/https://agentprime.io/advisories/CVE-2026-114077/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:46 GMTCVECVE-2026-114075: Trigger.dev before 4.5.12 Authorization Bypass via Alert Channels APIhttps://agentprime.io/advisories/CVE-2026-114075/https://agentprime.io/advisories/CVE-2026-114075/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:45 GMTCVECVE-2026-114074: Trigger.dev before 4.5.10 Webhook SSRF Protection Bypass via 198.18.0.0/15 Rangehttps://agentprime.io/advisories/CVE-2026-114074/https://agentprime.io/advisories/CVE-2026-114074/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:44 GMTCVECVE-2026-114072: Trigger.dev before 4.5.12 CSRF via Slack OAuth Callback Statehttps://agentprime.io/advisories/CVE-2026-114072/https://agentprime.io/advisories/CVE-2026-114072/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:43 GMTCVECVE-2026-114071: Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Routehttps://agentprime.io/advisories/CVE-2026-114071/https://agentprime.io/advisories/CVE-2026-114071/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:42 GMTCVECVE-2026-114070: Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Recordshttps://agentprime.io/advisories/CVE-2026-114070/https://agentprime.io/advisories/CVE-2026-114070/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:41 GMTCVECVE-2026-114069: Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpointhttps://agentprime.io/advisories/CVE-2026-114069/https://agentprime.io/advisories/CVE-2026-114069/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:40 GMTCVECVE-2026-114068: Trigger.dev before 4.6.0 Missing Authorization via Waitpoint Token Wait Endpointhttps://agentprime.io/advisories/CVE-2026-114068/https://agentprime.io/advisories/CVE-2026-114068/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:40 GMTCVECVE-2026-114067: Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Routehttps://agentprime.io/advisories/CVE-2026-114067/https://agentprime.io/advisories/CVE-2026-114067/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:39 GMTCVECVE-2026-114066: Trigger.dev before 4.7.0 Missing Authorization via Batch parentRunId Waitpointshttps://agentprime.io/advisories/CVE-2026-114066/https://agentprime.io/advisories/CVE-2026-114066/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:38 GMTCVECVE-2026-114065: Trigger.dev before 4.7.3 Tenant Filtering Bypass via Query Table Placeholdershttps://agentprime.io/advisories/CVE-2026-114065/https://agentprime.io/advisories/CVE-2026-114065/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:38 GMTCVECVE-2026-92773: Trigger.dev before 4.6.0 GitHub App Installation Takeoverhttps://agentprime.io/advisories/CVE-2026-92773/https://agentprime.io/advisories/CVE-2026-92773/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 20:32:34 GMTCVECVE-2026-73659: Trigger.dev: Cross-tenant object read/write via path traversal in packet presign APIhttps://agentprime.io/advisories/CVE-2026-73659/https://agentprime.io/advisories/CVE-2026-73659/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 21:19:48 GMTCVECVE-2026-73658: Trigger.dev: Cross-tenant object store read and write via URL path traversalhttps://agentprime.io/advisories/CVE-2026-73658/https://agentprime.io/advisories/CVE-2026-73658/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 21:16:59 GMTCVECVE-2026-73657: Trigger.dev: Cross-tenant payload poisoning via packet write + replayhttps://agentprime.io/advisories/CVE-2026-73657/https://agentprime.io/advisories/CVE-2026-73657/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 21:15:13 GMTCVECVE-2026-73656: Trigger.dev: Cross-project deployment worker registration can modify another project's deployment statehttps://agentprime.io/advisories/CVE-2026-73656/https://agentprime.io/advisories/CVE-2026-73656/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 19:56:04 GMTCVEcriticalCVE-2026-73655: Trigger.dev: Account Takeover via Cross-Provider OAuth Email Matching in Google Loginhttps://agentprime.io/advisories/CVE-2026-73655/https://agentprime.io/advisories/CVE-2026-73655/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 19:53:50 GMTCVE