Threats tagged 'ghsa-48fw-mh64-g6wf'

1 threat

Threats tagged 'ghsa-48fw-mh64-g6wf'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-92773trigger.dev · Authorization Bypass Through User-Controlled Key High7.1EPSS 0.3%2026-09-16CVE Database V5CVE-2026-92773 Trigger.dev versions before 4.6.0 contain an authorization bypass vulnerability where the application fails to verify that an authenticated user controls a GitHub App installation before associating it with their organization. This flaw allows attackers to claim another user's GitHub App installation by replaying state cookies and using sequential installation IDs, potentially gaining unauthorized access to the victim's repositories. EPSS 0.3%Vulnerability triggerdotdev #ghsa-48fw-mh64-g6wf	CVE Database V5	2026-09-16

Showing 1–1 of 1 result