Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Triger.dev OAuth State Session Binding Flaw Leads to Cross-Org CSRF (CWE-352)

github.com 2026-10-21 查看中文 →
Security Advisory Medium Trigger.dev
Affected:
  • Trigger.dev webapp <= 4.5.11
Fixed in:
  • Trigger.dev webapp >= 4.5.12
Referenced CVEs: CVE-2026-114072 · 4.3
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
JTServe Message Descriptor Validation Bypass: Crash/Unauth via >256 Fields 2026-10-21 Path Traversal in meta-naive-model v0.1.0 Leading to Sensitive Info Disclosure with POC 2026-10-21 Advanced Library Management System PHP report_search.php SQL Injection Vulnerability and Fix 2026-10-21 llama.cpp Path Traversal (v0.0.0-v0.0.10): POC & Fix 2026-10-21 CVE-2021-43754: lib_transformers Path Traversal in load_checkpoint Analysis & Fix 2026-10-21
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro