Vulnerabilities
Trigger.dev Patch Fixes Unauthenticated Secret Exposure in Versions Before 4.5.4
Trigger.dev released version 4.5.4 to resolve a high-severity vulnerability that allows attackers to steal environment variables without authentication.
unauthenticated access
Everything Patch Gazette has reported about unauthenticated access: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Eptura Archibus Users Face Critical RCE Risk Before 2025.02 Update
A critical flaw in Eptura Archibus allows unauthenticated remote code execution via malicious file uploads, affecting versions prior to 2025.02.