Repository navigation
Security: cloudflare/workers-sdk
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
OS Command Injection in `wrangler pages deploy`GHSA-36p8-mvp6-cv38 published
Jan 21, 2026 by lrapoport-cfHigh -
Cloudflare vite plugin exposes secrets over the built-in dev serverGHSA-4pfg-2mw5-f8jx published
Jul 7, 2025 by petebacondarwinLow -
Server-Side Request Forgery (SSRF) in MiniflareGHSA-fwvg-2739-22v7 published
Dec 29, 2023 by mskowroncfHigh -
Arbitrary remote file read in Wrangler dev serverGHSA-cfph-4qqh-w828 published
Dec 29, 2023 by mskowroncfModerate -
Arbitrary remote code execution within `wrangler dev` Workers sandboxGHSA-f8mp-x433-5wpf published
Dec 29, 2023 by mskowroncfHigh -
Directory traversal vulnerability in Cloudflare WranglerGHSA-8c93-4hch-xgxp published
Aug 3, 2023 by mskowroncfModerate