Vulnerabilities in pkg:npm/wrangler

PACKAGE
Share
Advisory Summary

GHSA-8h3q-9fpp-c883 is a HIGH wrangler affected by os command vulnerability (CWE-20: Improper Input Validation) affecting Duplicate Advisory libraries in the npm ecosystem. The issue involves wrangler affected by os command injection in `wrangler pages deploy`. Remediation is available in the latest vendor maintenance releases.

5 Known Advisory Record(s)
Package Vulnerability Intelligence

pkg:npm/wrangler

5 Known Advisory Record(s)

Vulnerability advisories affecting package pkg:npm/wrangler. Select an advisory below to view technical details or fixes.

Advisory ID CVE / NVD Severity Summary
GHSA-8h3q-9fpp-c883 - HIGH Duplicate Advisory: Wrangler affected by OS Command Injection in `wrangler pages deploy`
GHSA-36p8-mvp6-cv38 CVE-2026-0933 HIGH Wrangler affected by OS Command Injection in `wrangler pages deploy`
GHSA-f8mp-x433-5wpf CVE-2023-7080 CRITICAL Arbitrary remote code execution within `wrangler dev` Workers sandbox
GHSA-cfph-4qqh-w828 CVE-2023-7079 MODERATE Arbitrary remote file read in Wrangler dev server
GHSA-8c93-4hch-xgxp CVE-2023-3348 MODERATE Cloudflare Wrangler directory traversal vulnerability

GHSA-8h3q-9fpp-c883 at a Glance

CVE Identifier N/A
GHSA Identifier GHSA-8h3q-9fpp-c883
Severity HIGH
CVSS v3.1 Base Score N/A
CWE Classification CWE-20: Improper Input Validation
Affected Product Duplicate Advisory
Package Ecosystem npm
Published Date
Last Updated

How to Fix GHSA-8h3q-9fpp-c883

To remediate this vulnerability, upgrade all affected Duplicate Advisory dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

wrangler fixed: Latest secure release 
npm install wrangler@Latest secure release
Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release: 

npm ls wrangler

How to Check if You Are Affected

To determine whether your Node.js application is affected by GHSA-8h3q-9fpp-c883, inspect your project dependencies using npm:

npm ls wrangler

Analyze the terminal output to locate any version of Duplicate Advisory in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than the patched release), your application is affected.

Note: The npm ls wrangler command inspects dependencies declared in your package.json and lockfile; it does not perform automated runtime dynamic scanning.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under CWE-20: Improper Input Validation, where the product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. In Duplicate Advisory, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. ## Original Description SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g.,  execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution. ImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the --commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to: * Run any shell command. * Exfiltrate environment variables. * Compromise the CI runner to install backdoors or modify build artifacts. Credits Disclosed responsibly by kny4hacker. Mitigation * Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher. * Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher. * Users on Wrangler v2 (EOL) should upgrade to a supported major version.

GHSA-8h3q-9fpp-c883 Affected Duplicate Advisory Versions

1 component(s)
Product / Package Ecosystem Affected Versions Fixed Version
wrangler
npm/wrangler
npm
≥ 2.0.15

References

NVD — GHSA-8h3q-9fpp-c883 NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0933
Duplicate Advisory Source Repository REPOSITORY
https://github.com/cloudflare/workers-sdk

Frequently Asked Questions

What is GHSA-8h3q-9fpp-c883?
GHSA-8h3q-9fpp-c883 is a security vulnerability in Duplicate Advisory involving Wrangler affected by OS Command Injection in `wrangler pages deploy` under CWE-20: Improper Input Validation.
Which Duplicate Advisory versions are affected?
Affected versions include releases prior to current release patches across affected packages: wrangler.
What version fixes GHSA-8h3q-9fpp-c883?
Upgrading to current release patches (or the latest patched release for your respective branch) resolves the vulnerability.
Is wrangler affected?
Yes, wrangler is affected in releases prior to Latest secure release. Upgrade your dependency to Latest secure release or later.
What CWE is associated with GHSA-8h3q-9fpp-c883?
GHSA-8h3q-9fpp-c883 is classified under CWE-20: Improper Input Validation (The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.).
How can I check npm dependencies for GHSA-8h3q-9fpp-c883?
Run the dependency tree command: 'npm ls wrangler'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
View Raw JSON 
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-8h3q-9fpp-c883",
  "modified" : "2026-01-29T03:38:35Z",
  "published" : "2026-01-21T00:31:43Z",
  "withdrawn" : "2026-01-21T23:00:08Z",
  "aliases" : [ ],
  "summary" : "Duplicate Advisory: Wrangler affected by OS Command Injection in `wrangler pages deploy`",
  "details" : "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references.\n\n## Original Description\n\nSummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler.\n\n\n\n\nRoot causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g.,  execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution.\n\n\n\n\nImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the \n\n--commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to:\n\n  *  Run any shell command.\n  *  Exfiltrate environment variables.\n  *  Compromise the CI runner to install backdoors or modify build artifacts.\n\n\n\nCredits Disclosed responsibly by kny4hacker.\n\n\n\n\nMitigation\n  *  Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher.\n  *  Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher.\n  *  Users on Wrangler v2 (EOL) should upgrade to a supported major version.",
  "severity" : [ {
    "type" : "CVSS_V4",
    "score" : "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N"
  } ],
  "affected" : [ {
    "package" : {
      "ecosystem" : "npm",
      "name" : "wrangler"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "2.0.15"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "< 3.114.17"
    }
  } ],
  "references" : [ {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-0933"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/cloudflare/workers-sdk"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-20" ],
    "severity" : "HIGH",
    "github_reviewed" : true,
    "github_reviewed_at" : "2026-01-21T23:00:08Z",
    "nvd_published_at" : "2026-01-20T23:16:06Z"
  }
}