WR
Product
wrangler
by Cloudflare · last CVE Jan 20, 2026
4
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch

Add wrangler to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-0933
9.9
2%
Jan 20
OS Command Injection in `wrangler pages deploy`
Affected: v3.0.0 through v3.114.16; v4.0.0 through v4.59.0; v2.0.15+
CVE-2023-7080
8.0
1%
Dec 29
Arbitrary remote code execution within wrangler dev Workers sandbox
Affected: through 3.0.0; before 3.19.0; through 2.0.0; before 2.20.2
CVE-2023-7079
5.7
1%
Dec 29
Arbitrary remote file read in Wrangler dev server
Affected: through 3.9.0; before 3.19.0
CVE-2023-3348
5.7
1%
Aug 3
Directory traversal vulnerability in Cloudflare Wrangler
Affected: 3 before 3.1.1; 2 before 2.20.1
Showing 4