https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 14:37:17 +0000 https://db.gcve.eu/vuln/cve-2023-7079 <p><strong>Affected:</strong> Cloudflare wrangler</p> <p>Sending specially crafted HTTP requests and inspector messages to Wrangler&#39;s dev server could result in any file on the user&#39;s computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file.</p> <p><strong>Affected:</strong> Cloudflare wrangler</p> <p>Sending specially crafted HTTP requests and inspector messages to Wrangler&#39;s dev server could result in any file on the user&#39;s computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file.</p> https://db.gcve.eu/vuln/cve-2023-7079 https://db.gcve.eu/vuln/ghsa-cfph-4qqh-w828 <p><strong>Affected:</strong> npm: wrangler</p> <p>### Impact Sending specially crafted HTTP requests and inspector messages to Wrangler&#39;s dev server could result in any file on the user&#39;s computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file.</p> <p>### Patches This issue was fixed in `wrangler@3.19.0`. Wrangler will now only serve files that are part of your bundle, or referenced by your bundle&#39;s source maps.</p> <p>### Workarounds Configure Wrangler to listen on local interfaces instead with `wrangler dev --ip 127.0.0.1`. This is the [default as of `wrangler@3.16.0`](https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-f8mp-x433-5wpf), and removes the local network as an attack vector, but does not prevent an attack from visiting a malicious website.</p> <p>### References - https://github.com/cloudflare/workers-sdk/pull/4532 - https://github.com/cloudflare/workers-sdk/pull/4535</p> <p><strong>Affected:</strong> npm: wrangler</p> <p>### Impact Sending specially crafted HTTP requests and inspector messages to Wrangler&#39;s dev server could result in any file on the user&#39;s computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file.</p> <p>### Patches This issue was fixed in `wrangler@3.19.0`. Wrangler will now only serve files that are part of your bundle, or referenced by your bundle&#39;s source maps.</p> <p>### Workarounds Configure Wrangler to listen on local interfaces instead with `wrangler dev --ip 127.0.0.1`. This is the [default as of `wrangler@3.16.0`](https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-f8mp-x433-5wpf), and removes the local network as an attack vector, but does not prevent an attack from visiting a malicious website.</p> <p>### References - https://github.com/cloudflare/workers-sdk/pull/4532 - https://github.com/cloudflare/workers-sdk/pull/4535</p> https://db.gcve.eu/vuln/ghsa-cfph-4qqh-w828