Login Request a demo
WR
Product
Wrangler
by Cloudflare · last CVE Jan 20, 2026
4
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 2Low 0
Severity
All severities4Critical1High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wrangler to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-0933
9.9
2%
Jan 20
OS Command Injection in `wrangler pages deploy`
Affected: v3.0.0 through v3.114.16; v4.0.0 through v4.59.0; v2.0.15+
CVE-2023-7080
8.0
1%
Dec 29
The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging
Affected: 2.0.0 before 2.20.2; 3.0.0 before 3.19.0
CVE-2023-7079
5.7
1%
Dec 29
Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network
Affected: 3.9.0 before 3.19.0
CVE-2023-3348
5.7
1%
Aug 3
The Wrangler command line tool  (<=wrangler@3.1.0 or <=wrangler@2.20.1) was affected by a directory traversal vulnerability when running a local development server for Pages…
Affected: before 3.1.1
Showing 4