https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T02:21:03.588195+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-114070 fkie_cve-2026-114070 2026-10-23T02:21:03.600374+00:00

Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that stores a delegated user-actor token in browser-readable session input records. Attackers holding a chat's public session token can read the in records endpoint to recover the token from payload.metadata.userActorToken and replay it for environment JWT exchange.

 https://db.gcve.eu/vuln/ghsa-8hxg-26q3-8q8c GHSA-8hxg-26q3-8q8c 2026-10-23T02:21:03.600472+00:00

Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that stores a delegated user-actor token in browser-readable session input records. Attackers holding a chat's public session token can read the in records endpoint to recover the token from payload.metadata.userActorToken and replay it for environment JWT exchange.