triggerdotdev trigger.dev

3 known vulnerabilities in triggerdotdev trigger.dev, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-92773 CVSS 7.1 high Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their…
CVE-2026-85651 CVSS 8.4 high Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authenticated attackers…
CVE-2026-85650 CVSS 5.3 medium Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs that are fetched…