Product
Trigger.dev versions prior to 4.5.2 contain an improper authorization vulnerability that allows authenticated attackers to inject task runs into arbitrary environments.