Skip to content
OpenAdvisories

Package · npm

inngest

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2026-42047

    Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods

    Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfiltrate environment var…

    inngest inngest-js inngest npm