{"action":"Upgrade wrangler to 2.20.2 or later.","affected":[{"fixed":"3.19.0","introduced":"3.0.0"},{"fixed":"2.20.2","introduced":"2.0.0"}],"component":"wrangler","cve_ids":["CVE-2023-7080"],"ecosystem":"npm","epss":0.0063,"exploited":false,"fixed_versions":["3.19.0","2.20.2"],"ghsa_id":"GHSA-f8mp-x433-5wpf","id":"tcs_01M5KFN1JZYD1FEAVC8K6Z2B16","modified_at":"2026-07-08T06:53:13.037436470Z","published_at":"2024-01-03T21:26:50Z","references":["https://osv.dev/vulnerability/GHSA-f8mp-x433-5wpf","https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-f8mp-x433-5wpf","https://nvd.nist.gov/vuln/detail/CVE-2023-7080","https://github.com/cloudflare/workers-sdk/issues/4430","https://github.com/cloudflare/workers-sdk/pull/4437","https://github.com/cloudflare/workers-sdk/pull/4535","https://github.com/cloudflare/workers-sdk/pull/4550","https://github.com/cloudflare/workers-sdk/commit/05b1bbd2f5b8e60268e30c276067c3a3ae1239cf","https://github.com/cloudflare/workers-sdk/commit/29df8e17545bf3926b6d61678b596be809d40c6d","https://github.com/cloudflare/workers-sdk/commit/49a469601adaa9eb9e1f2d6de197c1979d5c6c1b","https://github.com/cloudflare/workers-sdk/commit/63708a94fb7a055bf15fa963f2d598b47b11d3c0","https://github.com/cloudflare/workers-sdk"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-f8mp-x433-5wpf","url":"https://osv.dev/vulnerability/GHSA-f8mp-x433-5wpf"}],"summary":"Arbitrary remote code execution within `wrangler dev` Workers sandbox"}