CVE-2026-42047

Inngest CVE-2026-42047 affects the TypeScript SDK versions 3.22.0–3.53.1. A change in 3.22.0 made the serve() HTTP handler’s diagnostic response expose process.env contents when unhandled methods PATCH, OPTIONS, or DELETE are used, allowing exfiltration of secrets, API keys, or credentials if the...