Please see this page for information on how to report a vulnerability to Cloudflare. Thanks!
Security: cloudflare/workers-sdk
Security
SECURITY.md
-
OS Command Injection in `wrangler pages deploy`GHSA-36p8-mvp6-cv38 published
Jan 21, 2026 by lrapoport-cfHigh -
Cloudflare vite plugin exposes secrets over the built-in dev serverGHSA-4pfg-2mw5-f8jx published
Jul 7, 2025 by petebacondarwinLow -
Server-Side Request Forgery (SSRF) in MiniflareGHSA-fwvg-2739-22v7 published
Dec 29, 2023 by mskowroncfHigh -
Arbitrary remote file read in Wrangler dev serverGHSA-cfph-4qqh-w828 published
Dec 29, 2023 by mskowroncfModerate -
Arbitrary remote code execution within `wrangler dev` Workers sandboxGHSA-f8mp-x433-5wpf published
Dec 29, 2023 by mskowroncfHigh -
Directory traversal vulnerability in Cloudflare WranglerGHSA-8c93-4hch-xgxp published
Aug 3, 2023 by mskowroncfModerate
Learn more about advisories related to cloudflare/workers-sdk in the GitHub Advisory Database