Skip to content
Threat Feed
Subscribe

Vendor

Trigger.dev

1 brief RSS
high advisory

Prototype Pollution in Trigger.dev Run Metadata API

An unauthenticated-accessible prototype pollution vulnerability in the Trigger.dev metadata API allows low-privileged attackers to corrupt the global object, leading to cross-tenant denial of service and process crashes via CVE-2026-73654.

trigger.dev prototype-pollution rce vulnerability webserver
1r 1t 1c