GHSA-pp95-gc86-jq6qPublished
Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
osv · GHSA-pp95-gc86-jq6q
- https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-pp95-gc86-jq6q
- https://github.com/triggerdotdev/trigger.dev/pull/4199
- https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254
- https://github.com/triggerdotdev/trigger.dev
- https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.