Inngest vulnerabilities
We track 1 vulnerability in Inngest products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 7, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Inngest vulnerabilities
- 8.6 High severity
inngest-js: Exposure of Sensitive Information to an Unauthorized Actor
Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfiltrate environment vari