CVE-2023-7079

npm/wrangler CVE-2023-7079: medium 6.9

Arbitrary remote file read in Wrangler dev server

Action: Upgrade wrangler to 3.19.0 or later.

npm i wrangler@3.19.0

Affected

Fixed versions

Sources

• osv: GHSA-cfph-4qqh-w828
• https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-cfph-4qqh-w828
• https://nvd.nist.gov/vuln/detail/CVE-2023-7079
• https://github.com/cloudflare/workers-sdk/pull/4532
• https://github.com/cloudflare/workers-sdk/pull/4535
• https://github.com/cloudflare/workers-sdk/commit/29df8e17545bf3926b6d61678b596be809d40c6d
• https://github.com/cloudflare/workers-sdk/commit/311ffbd5064f8301ac6f0311bbe5630897923b93
• https://github.com/cloudflare/workers-sdk

CVE-2023-7079 · published 2024-01-03T21:24:56Z · modified 2026-07-08T06:53:10.796571914Z · JSON