CVE-2026-114074

The software Trigger.dev prior to version 4.5.10 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. Authenticated project members can bypass webhook SSRF protections by targeting the non-global 198.18.0.0/15 benchmarking range. This occurs because the isUnsafeIPv4 check omits th...