https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:09:29.016023+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-92773 fkie_cve-2026-92773 2026-09-30T23:09:29.034183+00:00

Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's GitHub App installation by replaying state cookies and supplying sequential installation identifiers, gaining unauthorized access to the victim's repositories.

 https://db.gcve.eu/vuln/ghsa-48fw-mh64-g6wf GHSA-48fw-mh64-g6wf 2026-09-30T23:09:29.034233+00:00

Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's GitHub App installation by replaying state cookies and supplying sequential installation identifiers, gaining unauthorized access to the victim's repositories.