cloudflare/workers-sdk Security Advisories | GitStock

high2026-01-21

Wrangler affected by OS Command Injection in `wrangler pages deploy`

GHSA-36p8-mvp6-cv38 · CVE-2026-0933

medium2025-07-08

Cloudflare Vite plugin exposes secrets over the built-in dev server

GHSA-4pfg-2mw5-f8jx · CVE-2025-59427

critical2024-01-03

Arbitrary remote code execution within `wrangler dev` Workers sandbox

GHSA-f8mp-x433-5wpf · CVE-2023-7080

medium2024-01-03

Arbitrary remote file read in Wrangler dev server

GHSA-cfph-4qqh-w828 · CVE-2023-7079

high2023-12-29

Miniflare vulnerable to Server-Side Request Forgery (SSRF)

GHSA-fwvg-2739-22v7 · CVE-2023-7078

medium2023-08-03

Cloudflare Wrangler directory traversal vulnerability

GHSA-8c93-4hch-xgxp · CVE-2023-3348