1 matches found
GHSA-4672-HWV6-GQ62 Trigger.dev: Cross-environment deployment cancel
Summary Trigger.dev isolates each project into multiple environments dev, staging, prod, and per-PR preview branches, each with its own secret API key — the environment is a trust boundary a dev/preview/CI key is lower-trust than a prod key. Most API routes enforce this by scoping resource lookup...
5.4CVSS5.9AI score
SaveExploits0References5
20