Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/07 8:38 p.m.45 views

CVE-2026-42047 Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods

Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfiltrate environment variables from the host process via the...

8.6CVSS0.00383EPSS
SaveExploits0References2
Rows per page
Query Builder