npm
wrangler
8 known vulnerabilities · 0 critical · 1 high
GHSA-8h3q-9fpp-c883
Duplicate Advisory: Wrangler affected by OS Command Injection in `wrangler pages deploy`
Published Jan 21, 2026
CVE-2023-7080HIGH
Arbitrary remote code execution within `wrangler dev` Workers sandbox
Published Jan 3, 2024
Wrangler affected by OS Command Injection in `wrangler pages deploy`
Published Jan 21, 2026
MAL-2025-1070
Malicious code in cache-wranglerjs-binary (npm)
Published Feb 3, 2025
MAL-2026-5241
Malicious code in create-wrangler-deploy (npm)
Published Jun 5, 2026
MAL-2026-5267
Malicious code in wrangler-deploy (npm)
Published Jun 5, 2026
Check your entire dependency tree at onceRun dependency scan →