npm/trigger.dev: high 7.1

Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)

Action: Upgrade trigger.dev to 4.5.2 or later.

npm i trigger.dev@4.5.2

Affected

Fixed versions

Sources

• osv: GHSA-pp95-gc86-jq6q
• https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-pp95-gc86-jq6q
• https://github.com/triggerdotdev/trigger.dev/pull/4199
• https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254
• https://github.com/triggerdotdev/trigger.dev
• https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2

published 2026-10-02T22:35:24Z · modified 2026-10-21T10:58:05.446872453Z · JSON