https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T08:02:43.947543+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-114075 fkie_cve-2026-114075 2026-10-30T08:02:43.956592+00:00

Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted user-actor tokens to create alert channels by using the legacy personal access token helper. Attackers with a read-only UAT can POST to the project alertChannels endpoint to create production webhook channels, routing future deployment and error alerts to attacker-controlled infrastructure.

 https://db.gcve.eu/vuln/ghsa-h43q-265v-xjq4 GHSA-h43q-265v-xjq4 2026-10-30T08:02:43.956651+00:00

Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted user-actor tokens to create alert channels by using the legacy personal access token helper. Attackers with a read-only UAT can POST to the project alertChannels endpoint to create production webhook channels, routing future deployment and error alerts to attacker-controlled infrastructure.