wrangler

Command-line interface for all things Cloudflare Workers

Latest 4.151.1

91%

Total Score

healthy

Long-running, actively maintained CLI with strong provenance and documentation; CI workflows have limited hygiene concerns.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All 29 workflows were analyzed and all 68 action references are pinned, but two pull_request_target workflows use untrusted checkouts and the audit found a medium-confidence high-severity bot-condition issue plus high-confidence ad hoc package installs. No script injection was found, and most workflows use read-only or job-scoped permissions.

Vulnerabilities

Title	Versions	Severity
CVE-2026-0933 wrangler is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 2.0.15 - 3.114.17 and 4.0.0 - 4.59.1.	2.0.15 - 3.114.174.0.0 - 4.59.1	High
CVE-2023-7080 wrangler is vulnerable to Improper Privilege Management in versions 3.0.0 - 3.19.0 and 2.0.0 - 2.20.2.	2.0.0 - 2.20.23.0.0 - 3.19.0	Critical
CVE-2023-7079 wrangler is vulnerable to Improper Authentication in versions 3.9.0 - 3.19.0.	3.9.0 - 3.19.0	Medium
CVE-2023-3348 wrangler is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 2.20.1.	0.0.0 - 2.20.1	Medium

Package versions

Maintainers

wrangler-publisher

Direct Dependencies

Dependency	Last Release	Score
unenv Version 2.0.0-rc.24	—	—
esbuild Version 0.28.2	—	—
workerd Version 1.20261012.1	—	—
miniflare Version 5.20261012.1-beta	—	—
blake3-wasm Version 2.1.5	—	—