Skip to content
OpenAdvisories

Vendor

inngest

1 known vulnerabilities.

Products

inngest-js 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-42047

    Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods

    Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfiltrate environment var…

    inngest inngest-js inngest npm