Trigger.dev customer environment variables exposed
Trigger.dev, a platform for building serverless workflows across its service, disclosed that a vulnerability allowed some customers' environment variables to be unintentionally exposed. The issue stemmed from a misconfiguration that made sensitive data visible to unauthorized users. The company has promptly patched the flaw, notified affected users, and is reviewing security measures to prevent future incidents.