CVE-2026-42047 | inngest inngest-js up to 3.53.x HTTP serve information disclosure (GHSA-2jf5-6wwv-vhxx)

A vulnerability identified as problematic has been detected in inngest inngest-js up to 3.53.x. This affects the function serve of the component HTTP Handler. The manipulation leads to information disclosure.

This vulnerability is traded as CVE-2026-42047. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.