Vulnerabilities
How Trigger.dev SQL Injection Exposes Tenant Data on Self-Hosted Instances
Authenticated users with read access can bypass tenant guards to view task payloads from all organizations on shared Trigger.dev servers.
Trigger.dev
Everything SecOps Monitor has reported about Trigger.dev: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Unauthenticated Access in Trigger.dev Lets Attackers Steal Secrets
A high-severity flaw in Trigger.dev versions before 4.5.4 allows attackers to use a hardcoded secret to access environment variables and tamper with runs.