GHSA-36p8-mvp6-cv38
NoneCVSS
—
EPSS
—
Published
Jan 21, 2026
CISA due date
—
The record
Wrangler affected by OS Command Injection in `wrangler pages deploy`
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | wrangler | 2.0.15 | 3.114.17 |
| npm | wrangler | 4.0.0 | 4.59.1 |
Related vulnerabilities
- CVE-2026-0933 Wrangler affected by OS Command Injection in `wrangler pages deploy` Same vulnerability
- GHSA-8h3q-9fpp-c883 Duplicate Advisory: Wrangler affected by OS Command Injection in `wrangler pages deploy` Also affects wrangler
- CVE-2026-96376 Improper Neutralization of Special Elements used in an OS Command ("OS Command… CWE-78
- CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113725 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113722 virtualenv is a tool for creating isolated virtual python environments. CWE-78