Vulnerabilities
Critical Bypass in Trigger.dev Before 4.5.6 Allows Unauthenticated Access
A default secret flaw in Trigger.dev self-hosted setups enables authentication bypass, risking exposure of tenant data and infrastructure credentials.
self-hosted
Everything Threat Times has reported about self-hosted: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vikunja Patch Fixes Plaintext Token Storage Vulnerability CVE-2026-62376
Version 2.4.0 of the self-hosted task manager Vikunja resolves a high-severity flaw where plaintext tokens allowed full account takeover if database access was compromised.