CVE-2026-114088
1 advisory.
npm/trigger.dev CVE-2026-114088: medium 6.5
Trigger.dev: V1 coordinator default-secret unauth Socket.IO
Action: Upgrade trigger.dev to 4.5.4 or later.
npm i trigger.dev@4.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.5.4 | - |
Fixed versions
| 4.5.4 |
Sources
- osv: GHSA-gg6r-gp4c-89hp
- nvd: CVE-2026-114088
- https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-gg6r-gp4c-89hp
- https://github.com/triggerdotdev/trigger.dev/pull/4236
- https://github.com/triggerdotdev/trigger.dev/commit/5ba8557a51533be05f04245b03e1ca975cd57eff
- https://github.com/triggerdotdev/trigger.dev
- https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.4
CVE-2026-114088 · published · modified · JSON