npm/trigger.dev CVE-2026-114079: medium 5.4

Trigger.dev: Cross-environment deployment cancel

Action: Upgrade trigger.dev to 4.5.6 or later.

npm i trigger.dev@4.5.6

Affected

Fixed versions

Sources

• osv: GHSA-4672-hwv6-gq62
• https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-4672-hwv6-gq62
• https://github.com/triggerdotdev/trigger.dev/pull/4316
• https://github.com/triggerdotdev/trigger.dev/commit/6997aeb05e27d2db47f9eda01fdc8a17c81a1ae0
• https://github.com/triggerdotdev/trigger.dev
• https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.6

CVE-2026-114079 · published 2026-10-02T22:42:40Z · modified 2026-10-21T10:57:24.966429549Z · JSON