https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T13:12:03.136834+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-114079 fkie_cve-2026-114079 2026-10-23T13:12:03.138765+00:00

Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment API keys to cancel other environments' deployments because DeploymentService.getDeployment scopes lookups by projectId only. Attackers with a dev, preview, or CI secret key can POST to the deployment cancel endpoint to cancel in-progress production deployments within the same project.

 https://db.gcve.eu/vuln/ghsa-49rg-27pr-85f9 GHSA-49rg-27pr-85f9 2026-10-23T13:12:03.138855+00:00

Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment API keys to cancel other environments' deployments because DeploymentService.getDeployment scopes lookups by projectId only. Attackers with a dev, preview, or CI secret key can POST to the deployment cancel endpoint to cancel in-progress production deployments within the same project.