CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114075

    🚨 CVE-2026-114075 Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted user-actor...

  • CVE-2026-114076

    🚨 CVE-2026-114076 Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to make...

  • CVE-2026-114077

    🚨 CVE-2026-114077 Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 that resolves a...

  • CVE-2026-114078

    🚨 CVE-2026-114078 Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and...

  • CVE-2026-114079

    🚨 CVE-2026-114079 Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment API...

  • CVE-2026-114080

    🚨 CVE-2026-114080 Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project members to...

  • CVE-2026-114081

    🚨 CVE-2026-114081 Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which concatenates window-function...

  • CVE-2026-114082

    🚨 CVE-2026-114082 Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to...

  • CVE-2026-114083

    🚨 CVE-2026-114083 Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that...

  • CVE-2026-114085

    🚨 CVE-2026-114085 Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows...

  • CVE-2026-114086

    🚨 CVE-2026-114086 Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POST handler that allows...

  • CVE-2026-114087

    🚨 CVE-2026-114087 Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow...

  • CVE-2026-114088

    🚨 CVE-2026-114088 Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows...

  • CVE-2026-114089

    🚨 CVE-2026-114089 Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading...

  • CVE-2026-114090

    🚨 CVE-2026-114090 Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server...

  • CVE-2026-114091

    🚨 CVE-2026-114091 Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay route without scoping the lookup...

  • CVE-2026-114092

    🚨 CVE-2026-114092 Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler of the dashboard run replay...

  • CVE-2026-114093

    🚨 CVE-2026-114093 Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out...

Статистика статей

Статьи
53,087
Просмотры
255,260
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху