Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-6491
  • npm/hexo-deployer-wrangler
Malicious code in hexo-deployer-wrangler (npm) 26 Jun
  • No fix available
MAL-2026-5241
  • npm/create-wrangler-deploy
Malicious code in create-wrangler-deploy (npm) 05 Jun
  • No fix available
MAL-2026-5267
  • npm/wrangler-deploy
Malicious code in wrangler-deploy (npm) 05 Jun
  • No fix available
GHSA-36p8-mvp6-cv38
  • npm/wrangler
Wrangler affected by OS Command Injection in `wrangler pages deploy` 21 Jan
  • Fix available
  • Severity - 7.7 (High)
GHSA-f8mp-x433-5wpf
  • npm/wrangler
Arbitrary remote code execution within `wrangler dev` Workers sandbox 03 Jan 2024
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-cfph-4qqh-w828
  • npm/wrangler
Arbitrary remote file read in Wrangler dev server 03 Jan 2024
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-8c93-4hch-xgxp
  • npm/wrangler
Cloudflare Wrangler directory traversal vulnerability 03 Aug 2023
  • Fix available
  • Severity - 5.7 (Medium)
MAL-2023-1347
  • npm/wrangler-dev-api-app
Malicious code in wrangler-dev-api-app (npm) 25 Jul 2023
  • No fix available