npm/trigger.dev CVE-2026-114073: medium 5.5

Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values

Action: Upgrade trigger.dev to 4.5.9 or later.

npm i trigger.dev@4.5.9

Affected

Fixed versions

Sources

• osv: GHSA-fj2x-mqqp-3v2w
• https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-fj2x-mqqp-3v2w
• https://github.com/triggerdotdev/trigger.dev/pull/4420
• https://github.com/triggerdotdev/trigger.dev/commit/878c15811aca8339a751aa0c2211012db7a47ce5
• https://github.com/triggerdotdev/trigger.dev
• https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.9

CVE-2026-114073 · published 2026-10-02T22:45:12Z · modified 2026-10-21T10:57:26.665490472Z · JSON