npm/miniflare CVE-2023-7078: high 7.5, EPSS 0.55%

Miniflare vulnerable to Server-Side Request Forgery (SSRF)

Action: Upgrade miniflare to 3.20231030.2 or later.

npm i miniflare@3.20231030.2

Affected

Fixed versions

Sources

• osv: GHSA-fwvg-2739-22v7
• https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-fwvg-2739-22v7
• https://nvd.nist.gov/vuln/detail/CVE-2023-7078
• https://github.com/cloudflare/workers-sdk/pull/4532
• https://github.com/cloudflare/workers-sdk

CVE-2023-7078 · published 2023-12-29T19:36:41Z · modified 2026-07-08T06:53:02.739772909Z · JSON