Security: triggerdotdev/trigger.dev
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Public session tokens can overwrite own server-authored chat snapshotsGHSA-pc95-gc74-wg87 published
Sep 16, 2026 by carderneModerate -
Missing run authorization allows cross-tenant suspension and resume-data injectionGHSA-xrp6-5fpv-4fxf published
Sep 14, 2026 by carderneHigh -
Restricted additional API keys can read the environment root secret via the env-var dumpGHSA-4gjx-f5hj-678x published
Sep 14, 2026 by carderneHigh -
Dashboard Agent stores a delegated user token in session input records readable with the chat access tokenGHSA-wpp9-mq73-fhqm published
Sep 14, 2026 by carderneLow -
Authenticated project members could complete another member’s development waitpoint using a known IDGHSA-m8pr-xr7c-frh3 published
Sep 8, 2026 by carderneLow -
Slack OAuth state is not session-bound, enabling integration CSRFGHSA-hc5h-gqhc-4h79 published
Aug 20, 2026 by carderneModerate -
Trigger CLI debug deployment logs expose resolved environment secret valuesGHSA-fj2x-mqqp-3v2w published
Jul 31, 2026 by carderneModerate -
Webhook SSRF fix bypass via non-global 198.18.0.0/15 benchmarking rangeGHSA-fhh4-xvj5-m7pq published
Aug 7, 2026 by carderneModerate -
Delegated user-actor token capability checks are bypassed by the legacy alert-channel API.GHSA-wpjq-q67r-pg6m published
Aug 20, 2026 by carderneModerate -
Blind SSRF via alert-channel webhook: the webapp server POSTs HMAC-signed alert payloads to a user-set URL with no host allowlist / private-IP block (url validated only as z.string().optional())GHSA-q567-cr4x-96w4 published
Jul 9, 2026 by carderneModerate