PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
trigger.dev Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values Medium Risk 5.5 3 hours ago 3 hours ago
trigger.dev Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise High Risk 8.0 3 hours ago 3 hours ago
trigger.dev Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name High Risk 7.7 3 hours ago 3 hours ago
trigger.dev Trigger.dev: Cross-environment deployment cancel Medium Risk 5.4 3 hours ago 3 hours ago
trigger.dev Trigger.dev: Unauthenticated Realtime Stream Data Injection via Run FriendlyId Medium Risk 5.3 3 hours ago 3 hours ago
trigger.dev Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR) High Risk 7.1 3 hours ago 3 hours ago
trigger.dev Trigger.dev: V1 coordinator default-secret unauth Socket.IO Critical 9.5 3 hours ago 3 hours ago
trigger.dev Trigger.dev: Blind SSRF via alert-channel webhook Medium Risk 5.4 3 hours ago 3 hours ago
trigger.dev Trigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write) High Risk 7.1 6 hours ago 6 hours ago
trigger.dev Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL High Risk 7.7 6 hours ago 6 hours ago
@trigger.dev/core Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS High Risk 8.5 1 month ago 1 month ago
Data courtesy of OSV.dev
Page 1