Skip to content
Threat Feed
Subscribe

Product

Trigger.dev (< 4.6.0)

1 brief RSS
high advisory

Authentication Bypass in Trigger.dev via GitHub App Installation Binding

Trigger.dev versions before 4.6.0 contain an authentication bypass vulnerability allowing attackers to hijack GitHub App installations and gain unauthorized repository access by manipulating state cookies and installation identifiers.

Trigger.dev authentication-bypass github-integration cloud-native
1t 1c