Skip to content
OpenAdvisories

Package · npm

wrangler

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2026-0933

    OS Command Injection in `wrangler pages deploy`

    SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing …

    Cloudflare Wrangler wrangler npm
  • High 8.5
    CVE-2023-7080

    Arbitrary remote code execution within wrangler dev Workers sandbox

    The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect …

    Cloudflare Wrangler wrangler npm