Northflank mentioned they patched CVE-2026-98432. This appears to be similar, though not confirmed by trigger.dev yet