01 Record

CVE-2026-73654

Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS

HighPUBLISHEDCNA: GitHub_M

Base score8.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

02 Description

Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS

Published: 2026-08-13 19:29Z23 HR AGO
Last updated: 2026-08-14 16:34Z2 HR AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 8.5)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
Weaknesses: CWE-1321
SSVC decision: ExploitationpocAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 37ebcc30fdc7fa16cac555e44e9bd7f252da24d44e063342761b978bea888f5a

VendorProductVersionsPlatforms

triggerdotdevtrigger.dev>= 3.3.8, < 4.5.6—