Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/07 8:38 p.m.5 views

CVE-2026-42047 Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods

Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfiltrate environment variables from the host process via the...

8.6CVSS6AI score0.00383EPSS
SaveExploits0References4
Rows per page
Query Builder