CVE-2026-114084 - Trigger.dev before 4.5.6 SQL Injection via tags in Realtime Runs API
CVE ID :CVE-2026-114084 Published : Oct. 21, 2026, 1:17 a.m. | 49 minutes ago Description :Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, which concatenates the unescaped tags query parameter into the ElectricSQL shape where clause and...