CVE-2026-73654

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-73654
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73654.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-73654
Aliases
Downstream
Published
2026-08-13T19:29:05.537Z
Modified
2026-08-16T03:31:29.458316696Z
Severity
  • 8.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H CVSS Calculator
Summary
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
Details

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPath(operation.key).set(newMetadata, value) in packages/core/src/v3/runMetadata/operations.ts without rejecting dangerous constructor and prototype path segments. A caller with a normal environment API key can pollute Object.prototype in the shared webapp process, corrupting Prisma queries and Prometheus labels, breaking other tenants' worker authentication, and causing a process-wide denial of service. This issue is fixed in version 4.5.6.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-1321"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73654.json"
}
References

Affected packages

Git / github.com/triggerdotdev/trigger.dev

Affected ranges

Type
GIT
Repo
https://github.com/triggerdotdev/trigger.dev
Events
Introduced
4243cb2451ebe4c892591f1d0439358c84286988
Fixed
6997aeb05e27d2db47f9eda01fdc8a17c81a1ae0
Fixed
325b906319be1cb14b3ba8eb1ca7ac1ef1a30f01
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "3.3.8"
        },
        {
            "fixed": "4.5.6"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

@trigger.*
@trigger.dev/build@3.3.10
@trigger.dev/build@3.3.11
@trigger.dev/build@3.3.12
@trigger.dev/build@3.3.13
@trigger.dev/build@3.3.14
@trigger.dev/build@3.3.15
@trigger.dev/build@3.3.16
@trigger.dev/build@3.3.17
@trigger.dev/build@3.3.8
@trigger.dev/build@3.3.9
@trigger.dev/build@4.0.0
@trigger.dev/build@4.0.0-v4-beta.0
@trigger.dev/build@4.0.0-v4-beta.1
@trigger.dev/build@4.0.0-v4-beta.10
@trigger.dev/build@4.0.0-v4-beta.11
@trigger.dev/build@4.0.0-v4-beta.12
@trigger.dev/build@4.0.0-v4-beta.13
@trigger.dev/build@4.0.0-v4-beta.14
@trigger.dev/build@4.0.0-v4-beta.15
@trigger.dev/build@4.0.0-v4-beta.16
@trigger.dev/build@4.0.0-v4-beta.17
@trigger.dev/build@4.0.0-v4-beta.18
@trigger.dev/build@4.0.0-v4-beta.19
@trigger.dev/build@4.0.0-v4-beta.2
@trigger.dev/build@4.0.0-v4-beta.20
@trigger.dev/build@4.0.0-v4-beta.21
@trigger.dev/build@4.0.0-v4-beta.22
@trigger.dev/build@4.0.0-v4-beta.23
@trigger.dev/build@4.0.0-v4-beta.24
@trigger.dev/build@4.0.0-v4-beta.25
@trigger.dev/build@4.0.0-v4-beta.26
@trigger.dev/build@4.0.0-v4-beta.27
@trigger.dev/build@4.0.0-v4-beta.28
@trigger.dev/build@4.0.0-v4-beta.3
@trigger.dev/build@4.0.0-v4-beta.5
@trigger.dev/build@4.0.0-v4-beta.6
@trigger.dev/build@4.0.0-v4-beta.7
@trigger.dev/build@4.0.0-v4-beta.8
@trigger.dev/build@4.0.0-v4-beta.9
@trigger.dev/build@4.0.1
@trigger.dev/build@4.0.2
@trigger.dev/build@4.0.3
@trigger.dev/build@4.0.4
@trigger.dev/build@4.0.5
@trigger.dev/build@4.0.6
@trigger.dev/build@4.0.7
@trigger.dev/build@4.1.0
@trigger.dev/build@4.1.1
@trigger.dev/build@4.1.2
@trigger.dev/build@4.2.0
@trigger.dev/build@4.3.0
@trigger.dev/build@4.3.1
@trigger.dev/build@4.3.2
@trigger.dev/build@4.3.3
@trigger.dev/build@4.4.0
@trigger.dev/build@4.4.1
@trigger.dev/core@3.3.10
@trigger.dev/core@3.3.11
@trigger.dev/core@3.3.12
@trigger.dev/core@3.3.13
@trigger.dev/core@3.3.14
@trigger.dev/core@3.3.15
@trigger.dev/core@3.3.16
@trigger.dev/core@3.3.17
@trigger.dev/core@3.3.8
@trigger.dev/core@3.3.9
@trigger.dev/core@4.0.0
@trigger.dev/core@4.0.0-v4-beta.0
@trigger.dev/core@4.0.0-v4-beta.1
@trigger.dev/core@4.0.0-v4-beta.10
@trigger.dev/core@4.0.0-v4-beta.11
@trigger.dev/core@4.0.0-v4-beta.12
@trigger.dev/core@4.0.0-v4-beta.13
@trigger.dev/core@4.0.0-v4-beta.14
@trigger.dev/core@4.0.0-v4-beta.15
@trigger.dev/core@4.0.0-v4-beta.16
@trigger.dev/core@4.0.0-v4-beta.17
@trigger.dev/core@4.0.0-v4-beta.18
@trigger.dev/core@4.0.0-v4-beta.19
@trigger.dev/core@4.0.0-v4-beta.2
@trigger.dev/core@4.0.0-v4-beta.20
@trigger.dev/core@4.0.0-v4-beta.21
@trigger.dev/core@4.0.0-v4-beta.22
@trigger.dev/core@4.0.0-v4-beta.23
@trigger.dev/core@4.0.0-v4-beta.24
@trigger.dev/core@4.0.0-v4-beta.25
@trigger.dev/core@4.0.0-v4-beta.26
@trigger.dev/core@4.0.0-v4-beta.27
@trigger.dev/core@4.0.0-v4-beta.28
@trigger.dev/core@4.0.0-v4-beta.3
@trigger.dev/core@4.0.0-v4-beta.5
@trigger.dev/core@4.0.0-v4-beta.6
@trigger.dev/core@4.0.0-v4-beta.7
@trigger.dev/core@4.0.0-v4-beta.8
@trigger.dev/core@4.0.0-v4-beta.9
@trigger.dev/core@4.0.1
@trigger.dev/core@4.0.2
@trigger.dev/core@4.0.3
@trigger.dev/core@4.0.4
@trigger.dev/core@4.0.5
@trigger.dev/core@4.0.6
@trigger.dev/core@4.0.7
@trigger.dev/core@4.1.0
@trigger.dev/core@4.1.1
@trigger.dev/core@4.1.2
@trigger.dev/core@4.2.0
@trigger.dev/core@4.3.0
@trigger.dev/core@4.3.1
@trigger.dev/core@4.3.2
@trigger.dev/core@4.3.3
@trigger.dev/core@4.4.0
@trigger.dev/core@4.4.1
@trigger.dev/python@3.3.17
@trigger.dev/python@4.0.0
@trigger.dev/python@4.0.0-v4-beta.0
@trigger.dev/python@4.0.0-v4-beta.1
@trigger.dev/python@4.0.0-v4-beta.10
@trigger.dev/python@4.0.0-v4-beta.11
@trigger.dev/python@4.0.0-v4-beta.12
@trigger.dev/python@4.0.0-v4-beta.13
@trigger.dev/python@4.0.0-v4-beta.14
@trigger.dev/python@4.0.0-v4-beta.15
@trigger.dev/python@4.0.0-v4-beta.16
@trigger.dev/python@4.0.0-v4-beta.17
@trigger.dev/python@4.0.0-v4-beta.18
@trigger.dev/python@4.0.0-v4-beta.19
@trigger.dev/python@4.0.0-v4-beta.2
@trigger.dev/python@4.0.0-v4-beta.20
@trigger.dev/python@4.0.0-v4-beta.21
@trigger.dev/python@4.0.0-v4-beta.22
@trigger.dev/python@4.0.0-v4-beta.23
@trigger.dev/python@4.0.0-v4-beta.24
@trigger.dev/python@4.0.0-v4-beta.25
@trigger.dev/python@4.0.0-v4-beta.26
@trigger.dev/python@4.0.0-v4-beta.27
@trigger.dev/python@4.0.0-v4-beta.28
@trigger.dev/python@4.0.0-v4-beta.3
@trigger.dev/python@4.0.0-v4-beta.5
@trigger.dev/python@4.0.0-v4-beta.6
@trigger.dev/python@4.0.0-v4-beta.7
@trigger.dev/python@4.0.0-v4-beta.8
@trigger.dev/python@4.0.0-v4-beta.9
@trigger.dev/python@4.0.1
@trigger.dev/python@4.0.2
@trigger.dev/python@4.0.3
@trigger.dev/python@4.0.4
@trigger.dev/python@4.0.5
@trigger.dev/python@4.0.6
@trigger.dev/python@4.0.7
@trigger.dev/python@4.1.0
@trigger.dev/python@4.1.1
@trigger.dev/python@4.1.2
@trigger.dev/python@4.2.0
@trigger.dev/python@4.3.0
@trigger.dev/python@4.3.1
@trigger.dev/python@4.3.2
@trigger.dev/python@4.3.3
@trigger.dev/python@4.4.0
@trigger.dev/python@4.4.1
@trigger.dev/react-hooks@3.3.10
@trigger.dev/react-hooks@3.3.11
@trigger.dev/react-hooks@3.3.12
@trigger.dev/react-hooks@3.3.13
@trigger.dev/react-hooks@3.3.14
@trigger.dev/react-hooks@3.3.15
@trigger.dev/react-hooks@3.3.16
@trigger.dev/react-hooks@3.3.17
@trigger.dev/react-hooks@3.3.8
@trigger.dev/react-hooks@3.3.9
@trigger.dev/react-hooks@4.0.0
@trigger.dev/react-hooks@4.0.0-v4-beta.0
@trigger.dev/react-hooks@4.0.0-v4-beta.1
@trigger.dev/react-hooks@4.0.0-v4-beta.10
@trigger.dev/react-hooks@4.0.0-v4-beta.11
@trigger.dev/react-hooks@4.0.0-v4-beta.12
@trigger.dev/react-hooks@4.0.0-v4-beta.13
@trigger.dev/react-hooks@4.0.0-v4-beta.14
@trigger.dev/react-hooks@4.0.0-v4-beta.15
@trigger.dev/react-hooks@4.0.0-v4-beta.16
@trigger.dev/react-hooks@4.0.0-v4-beta.17
@trigger.dev/react-hooks@4.0.0-v4-beta.18
@trigger.dev/react-hooks@4.0.0-v4-beta.19
@trigger.dev/react-hooks@4.0.0-v4-beta.2
@trigger.dev/react-hooks@4.0.0-v4-beta.20
@trigger.dev/react-hooks@4.0.0-v4-beta.21
@trigger.dev/react-hooks@4.0.0-v4-beta.22
@trigger.dev/react-hooks@4.0.0-v4-beta.23
@trigger.dev/react-hooks@4.0.0-v4-beta.24
@trigger.dev/react-hooks@4.0.0-v4-beta.25
@trigger.dev/react-hooks@4.0.0-v4-beta.26
@trigger.dev/react-hooks@4.0.0-v4-beta.27
@trigger.dev/react-hooks@4.0.0-v4-beta.28
@trigger.dev/react-hooks@4.0.0-v4-beta.3
@trigger.dev/react-hooks@4.0.0-v4-beta.5
@trigger.dev/react-hooks@4.0.0-v4-beta.6
@trigger.dev/react-hooks@4.0.0-v4-beta.7
@trigger.dev/react-hooks@4.0.0-v4-beta.8
@trigger.dev/react-hooks@4.0.0-v4-beta.9
@trigger.dev/react-hooks@4.0.1
@trigger.dev/react-hooks@4.0.2
@trigger.dev/react-hooks@4.0.3
@trigger.dev/react-hooks@4.0.4
@trigger.dev/react-hooks@4.0.5
@trigger.dev/react-hooks@4.0.6
@trigger.dev/react-hooks@4.0.7
@trigger.dev/react-hooks@4.1.0
@trigger.dev/react-hooks@4.1.1
@trigger.dev/react-hooks@4.1.2
@trigger.dev/react-hooks@4.2.0
@trigger.dev/react-hooks@4.3.0
@trigger.dev/react-hooks@4.3.1
@trigger.dev/react-hooks@4.3.2
@trigger.dev/react-hooks@4.3.3
@trigger.dev/react-hooks@4.4.0
@trigger.dev/react-hooks@4.4.1
@trigger.dev/redis-worker@4.0.0
@trigger.dev/redis-worker@4.0.0-v4-beta.0
@trigger.dev/redis-worker@4.0.0-v4-beta.1
@trigger.dev/redis-worker@4.0.0-v4-beta.10
@trigger.dev/redis-worker@4.0.0-v4-beta.11
@trigger.dev/redis-worker@4.0.0-v4-beta.12
@trigger.dev/redis-worker@4.0.0-v4-beta.13
@trigger.dev/redis-worker@4.0.0-v4-beta.14
@trigger.dev/redis-worker@4.0.0-v4-beta.15
@trigger.dev/redis-worker@4.0.0-v4-beta.16
@trigger.dev/redis-worker@4.0.0-v4-beta.17
@trigger.dev/redis-worker@4.0.0-v4-beta.18
@trigger.dev/redis-worker@4.0.0-v4-beta.19
@trigger.dev/redis-worker@4.0.0-v4-beta.2
@trigger.dev/redis-worker@4.0.0-v4-beta.20
@trigger.dev/redis-worker@4.0.0-v4-beta.21
@trigger.dev/redis-worker@4.0.0-v4-beta.22
@trigger.dev/redis-worker@4.0.0-v4-beta.23
@trigger.dev/redis-worker@4.0.0-v4-beta.24
@trigger.dev/redis-worker@4.0.0-v4-beta.25
@trigger.dev/redis-worker@4.0.0-v4-beta.26
@trigger.dev/redis-worker@4.0.0-v4-beta.27
@trigger.dev/redis-worker@4.0.0-v4-beta.28
@trigger.dev/redis-worker@4.0.0-v4-beta.3
@trigger.dev/redis-worker@4.0.0-v4-beta.5
@trigger.dev/redis-worker@4.0.0-v4-beta.6
@trigger.dev/redis-worker@4.0.0-v4-beta.7
@trigger.dev/redis-worker@4.0.0-v4-beta.8
@trigger.dev/redis-worker@4.0.0-v4-beta.9
@trigger.dev/redis-worker@4.0.1
@trigger.dev/redis-worker@4.0.2
@trigger.dev/redis-worker@4.0.3
@trigger.dev/redis-worker@4.0.4
@trigger.dev/redis-worker@4.0.5
@trigger.dev/redis-worker@4.0.6
@trigger.dev/redis-worker@4.0.7
@trigger.dev/redis-worker@4.1.0
@trigger.dev/redis-worker@4.1.1
@trigger.dev/redis-worker@4.1.2
@trigger.dev/redis-worker@4.2.0
@trigger.dev/redis-worker@4.3.0
@trigger.dev/redis-worker@4.3.1
@trigger.dev/redis-worker@4.3.2
@trigger.dev/redis-worker@4.3.3
@trigger.dev/redis-worker@4.4.0
@trigger.dev/redis-worker@4.4.1
@trigger.dev/rsc@3.3.10
@trigger.dev/rsc@3.3.11
@trigger.dev/rsc@3.3.12
@trigger.dev/rsc@3.3.13
@trigger.dev/rsc@3.3.14
@trigger.dev/rsc@3.3.15
@trigger.dev/rsc@3.3.16
@trigger.dev/rsc@3.3.17
@trigger.dev/rsc@3.3.8
@trigger.dev/rsc@3.3.9
@trigger.dev/rsc@4.0.0
@trigger.dev/rsc@4.0.0-v4-beta.0
@trigger.dev/rsc@4.0.0-v4-beta.1
@trigger.dev/rsc@4.0.0-v4-beta.10
@trigger.dev/rsc@4.0.0-v4-beta.11
@trigger.dev/rsc@4.0.0-v4-beta.12
@trigger.dev/rsc@4.0.0-v4-beta.13
@trigger.dev/rsc@4.0.0-v4-beta.14
@trigger.dev/rsc@4.0.0-v4-beta.15
@trigger.dev/rsc@4.0.0-v4-beta.16
@trigger.dev/rsc@4.0.0-v4-beta.17
@trigger.dev/rsc@4.0.0-v4-beta.18
@trigger.dev/rsc@4.0.0-v4-beta.19
@trigger.dev/rsc@4.0.0-v4-beta.2
@trigger.dev/rsc@4.0.0-v4-beta.20
@trigger.dev/rsc@4.0.0-v4-beta.21
@trigger.dev/rsc@4.0.0-v4-beta.22
@trigger.dev/rsc@4.0.0-v4-beta.23
@trigger.dev/rsc@4.0.0-v4-beta.24
@trigger.dev/rsc@4.0.0-v4-beta.25
@trigger.dev/rsc@4.0.0-v4-beta.26
@trigger.dev/rsc@4.0.0-v4-beta.27
@trigger.dev/rsc@4.0.0-v4-beta.28
@trigger.dev/rsc@4.0.0-v4-beta.3
@trigger.dev/rsc@4.0.0-v4-beta.5
@trigger.dev/rsc@4.0.0-v4-beta.6
@trigger.dev/rsc@4.0.0-v4-beta.7
@trigger.dev/rsc@4.0.0-v4-beta.8
@trigger.dev/rsc@4.0.0-v4-beta.9
@trigger.dev/rsc@4.0.1
@trigger.dev/rsc@4.0.2
@trigger.dev/rsc@4.0.3
@trigger.dev/rsc@4.0.4
@trigger.dev/rsc@4.0.5
@trigger.dev/rsc@4.0.6
@trigger.dev/rsc@4.0.7
@trigger.dev/rsc@4.1.0
@trigger.dev/rsc@4.1.1
@trigger.dev/rsc@4.1.2
@trigger.dev/rsc@4.2.0
@trigger.dev/rsc@4.3.0
@trigger.dev/rsc@4.3.1
@trigger.dev/rsc@4.3.2
@trigger.dev/rsc@4.3.3
@trigger.dev/rsc@4.4.0
@trigger.dev/rsc@4.4.1
@trigger.dev/schema-to-json@4.0.0
@trigger.dev/schema-to-json@4.0.0-v4-beta.27
@trigger.dev/schema-to-json@4.0.0-v4-beta.28
@trigger.dev/schema-to-json@4.0.1
@trigger.dev/schema-to-json@4.0.2
@trigger.dev/schema-to-json@4.0.3
@trigger.dev/schema-to-json@4.0.4
@trigger.dev/schema-to-json@4.0.5
@trigger.dev/schema-to-json@4.0.6
@trigger.dev/schema-to-json@4.0.7
@trigger.dev/schema-to-json@4.1.0
@trigger.dev/schema-to-json@4.1.1
@trigger.dev/schema-to-json@4.1.2
@trigger.dev/schema-to-json@4.2.0
@trigger.dev/schema-to-json@4.3.0
@trigger.dev/schema-to-json@4.3.1
@trigger.dev/schema-to-json@4.3.2
@trigger.dev/schema-to-json@4.3.3
@trigger.dev/schema-to-json@4.4.0
@trigger.dev/schema-to-json@4.4.1
@trigger.dev/sdk@3.3.10
@trigger.dev/sdk@3.3.11
@trigger.dev/sdk@3.3.12
@trigger.dev/sdk@3.3.13
@trigger.dev/sdk@3.3.14
@trigger.dev/sdk@3.3.15
@trigger.dev/sdk@3.3.16
@trigger.dev/sdk@3.3.17
@trigger.dev/sdk@3.3.8
@trigger.dev/sdk@3.3.9
@trigger.dev/sdk@4.0.0
@trigger.dev/sdk@4.0.0-v4-beta.0
@trigger.dev/sdk@4.0.0-v4-beta.1
@trigger.dev/sdk@4.0.0-v4-beta.10
@trigger.dev/sdk@4.0.0-v4-beta.11
@trigger.dev/sdk@4.0.0-v4-beta.12
@trigger.dev/sdk@4.0.0-v4-beta.13
@trigger.dev/sdk@4.0.0-v4-beta.14
@trigger.dev/sdk@4.0.0-v4-beta.15
@trigger.dev/sdk@4.0.0-v4-beta.16
@trigger.dev/sdk@4.0.0-v4-beta.17
@trigger.dev/sdk@4.0.0-v4-beta.18
@trigger.dev/sdk@4.0.0-v4-beta.19
@trigger.dev/sdk@4.0.0-v4-beta.2
@trigger.dev/sdk@4.0.0-v4-beta.20
@trigger.dev/sdk@4.0.0-v4-beta.21
@trigger.dev/sdk@4.0.0-v4-beta.22
@trigger.dev/sdk@4.0.0-v4-beta.23
@trigger.dev/sdk@4.0.0-v4-beta.24
@trigger.dev/sdk@4.0.0-v4-beta.25
@trigger.dev/sdk@4.0.0-v4-beta.26
@trigger.dev/sdk@4.0.0-v4-beta.27
@trigger.dev/sdk@4.0.0-v4-beta.28
@trigger.dev/sdk@4.0.0-v4-beta.3
@trigger.dev/sdk@4.0.0-v4-beta.5
@trigger.dev/sdk@4.0.0-v4-beta.6
@trigger.dev/sdk@4.0.0-v4-beta.7
@trigger.dev/sdk@4.0.0-v4-beta.8
@trigger.dev/sdk@4.0.0-v4-beta.9
@trigger.dev/sdk@4.0.1
@trigger.dev/sdk@4.0.2
@trigger.dev/sdk@4.0.3
@trigger.dev/sdk@4.0.4
@trigger.dev/sdk@4.0.5
@trigger.dev/sdk@4.0.6
@trigger.dev/sdk@4.0.7
@trigger.dev/sdk@4.1.0
@trigger.dev/sdk@4.1.1
@trigger.dev/sdk@4.1.2
@trigger.dev/sdk@4.2.0
@trigger.dev/sdk@4.3.0
@trigger.dev/sdk@4.3.1
@trigger.dev/sdk@4.3.2
@trigger.dev/sdk@4.3.3
@trigger.dev/sdk@4.4.0
@trigger.dev/sdk@4.4.1
Other
build-chris-test-blacksmith
docs-release-2026-06-17
docs-release-2026-06-18
docs-release-2026-07-02
docs-release-2026-07-09
docs-release-2026-07-14
docs-release-20260707-1007
docs-release-20260714-1409
infra-prod-build
infra-test-build
re2-prod-2026-04-08
re2-prod-build
re2-prod-client-deqeueue-metrics
re2-prod-deterministic-builds
re2-prod-large-pool-separation
re2-prod-per-machine-request-ratios
re2-prod-project-scheduling-affinity
re2-prod-supervisor-callback-auth-v1
re2-prod-supervisor-ndots-override
re2-prod-supervisor-tri-10293
re2-prod-supervisor-tri-11473
re2-prod-uncaught-exception
re2-test-2026-04-08
re2-test-build
re2-test-per-machine-request-ratios
re2-test-private-link
re2-test-project-scheduling-affinity
re2-test-supervisor-callback-auth-v1
re2-test-supervisor-ndots-override
re2-test-supervisor-tri-10293
re2-test-supervisor-tri-11473
re2-test-uncaught-exception
re2-test-warm-start-verify
build-ecr-default-policy.*
build-ecr-default-policy.rc0
helm-v4.*
helm-v4.0.3
helm-v4.0.4
helm-v4.4.4
helm-v4.4.5
helm-v4.4.6
helm-v4.5.0
helm-v4.5.0-rc.0
helm-v4.5.0-rc.1
helm-v4.5.0-rc.3
helm-v4.5.0-rc.4
helm-v4.5.0-rc.5
helm-v4.5.0-rc.6
helm-v4.5.0-rc.7
helm-v4.5.1
helm-v4.5.2
helm-v4.5.3
helm-v4.5.4
helm-v4.5.5
trigger.*
trigger.dev@3.3.10
trigger.dev@3.3.11
trigger.dev@3.3.12
trigger.dev@3.3.13
trigger.dev@3.3.14
trigger.dev@3.3.15
trigger.dev@3.3.16
trigger.dev@3.3.17
trigger.dev@3.3.8
trigger.dev@3.3.9
trigger.dev@4.0.0
trigger.dev@4.0.0-v4-beta.0
trigger.dev@4.0.0-v4-beta.1
trigger.dev@4.0.0-v4-beta.10
trigger.dev@4.0.0-v4-beta.11
trigger.dev@4.0.0-v4-beta.12
trigger.dev@4.0.0-v4-beta.13
trigger.dev@4.0.0-v4-beta.14
trigger.dev@4.0.0-v4-beta.15
trigger.dev@4.0.0-v4-beta.16
trigger.dev@4.0.0-v4-beta.17
trigger.dev@4.0.0-v4-beta.18
trigger.dev@4.0.0-v4-beta.19
trigger.dev@4.0.0-v4-beta.2
trigger.dev@4.0.0-v4-beta.20
trigger.dev@4.0.0-v4-beta.21
trigger.dev@4.0.0-v4-beta.22
trigger.dev@4.0.0-v4-beta.23
trigger.dev@4.0.0-v4-beta.24
trigger.dev@4.0.0-v4-beta.25
trigger.dev@4.0.0-v4-beta.26
trigger.dev@4.0.0-v4-beta.27
trigger.dev@4.0.0-v4-beta.28
trigger.dev@4.0.0-v4-beta.3
trigger.dev@4.0.0-v4-beta.5
trigger.dev@4.0.0-v4-beta.6
trigger.dev@4.0.0-v4-beta.7
trigger.dev@4.0.0-v4-beta.8
trigger.dev@4.0.0-v4-beta.9
trigger.dev@4.0.1
trigger.dev@4.0.2
trigger.dev@4.0.3
trigger.dev@4.0.4
trigger.dev@4.0.5
trigger.dev@4.0.6
trigger.dev@4.0.7
trigger.dev@4.1.0
trigger.dev@4.1.1
trigger.dev@4.1.2
trigger.dev@4.2.0
trigger.dev@4.3.0
trigger.dev@4.3.1
trigger.dev@4.3.2
trigger.dev@4.3.3
trigger.dev@4.4.0
trigger.dev@4.4.1
v.*
v.docker.3.3.10
v.docker.3.3.11
v.docker.3.3.13
v.docker.3.3.17
v.docker.3.3.18
v.docker.3.3.8
v.docker.3.3.9
v.docker.4.0.0
v.docker.4.0.0-v4-beta.21
v.docker.4.0.0-v4-beta.22
v.docker.4.0.0-v4-beta.23
v.docker.4.0.0-v4-beta.24
v.docker.4.0.0-v4-beta.25
v.docker.4.0.0-v4-beta.26
v.docker.4.0.0-v4-beta.26.1
v.docker.4.0.4
v.docker.4.1.2
v.docker.4.2.0
v.docker.4.3.0
v.docker.4.3.1
v.docker.4.3.2
v.docker.4.3.3
v.docker.4.4.0
v.docker.4.4.1
v.docker.4.4.2
v.docker.4.4.3
v.docker.4.4.4
v.docker.4.4.5
v.docker.4.4.6
v.docker.4.5.0
v.docker.4.5.0-rc.0
v.docker.4.5.0-rc.1
v.docker.4.5.0-rc.2
v.docker.4.5.0-rc.3
v.docker.4.5.0-rc.4
v.docker.4.5.0-rc.5
v.docker.4.5.0-rc.6
v.docker.4.5.0-rc.7
v.docker.4.5.1
v.docker.4.5.2
v.docker.4.5.3
v.docker.4.5.4
v.docker.4.5.5
v4.*
v4.4.2
v4.4.3
v4.4.4
v4.4.5
v4.4.6
v4.5.0
v4.5.0-rc.0
v4.5.0-rc.1
v4.5.0-rc.2
v4.5.0-rc.3
v4.5.0-rc.4
v4.5.0-rc.5
v4.5.0-rc.6
v4.5.0-rc.7
v4.5.1
v4.5.2
v4.5.3
v4.5.4
v4.5.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73654.json"