CVE Vulnerability Database
Search and browse 420,635 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114088 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that ... |
| CVE-2026-114087 | HIGH | 8.1 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.examp... |
| CVE-2026-114086 | MEDIUM | 5.3 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POST handler that allow... |
| CVE-2026-114085 | HIGH | 7.9 | 0.2% | Oct 21, 2026 | Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows ... |
| CVE-2026-114084 | HIGH | 7.7 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, which concatenates t... |
| CVE-2026-114083 | HIGH | 8.1 | 0.4% | Oct 21, 2026 | Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints... |
| CVE-2026-114082 | HIGH | 8.1 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write acc... |
| CVE-2026-114081 | HIGH | 7.7 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which concatenates window-f... |
| CVE-2026-114080 | MEDIUM | 5 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project me... |
| CVE-2026-114079 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment... |
| CVE-2026-114078 | HIGH | 8.1 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTask... |
| CVE-2026-114077 | HIGH | 7.1 | 0.2% | Oct 21, 2026 | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 that resol... |
| CVE-2026-114076 | MEDIUM | 5.4 | 0.2% | Oct 21, 2026 | Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to... |
| CVE-2026-114075 | MEDIUM | 5.4 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted us... |
| CVE-2026-114074 | MEDIUM | 5.4 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members... |
| CVE-2026-114073 | MEDIUM | 5.5 | 0.1% | Oct 21, 2026 | Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret v... |
| CVE-2026-114072 | MEDIUM | 4.3 | 0.1% | Oct 21, 2026 | The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack... |
| CVE-2026-114071 | LOW | 3.1 | 0.2% | Oct 21, 2026 | Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to co... |
| CVE-2026-114070 | LOW | 3.5 | 0.2% | Oct 21, 2026 | Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that ... |
| CVE-2026-114069 | HIGH | 8.1 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvar... |
| CVE-2026-114068 | HIGH | 8.3 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows... |
| CVE-2026-114067 | MEDIUM | 6.5 | 0.2% | Oct 21, 2026 | Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint... |
| CVE-2026-114066 | HIGH | 8.1 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of unrestricted environment ... |
| CVE-2026-114065 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows authenticated users to read other ... |
| CVE-2026-114064 | MEDIUM | 5.5 | 0.3% | Oct 21, 2026 | Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows su... |