Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-7078
7.5
HIGHCVSS v3
Severity scale
010
Description
Sending specially crafted HTTP requests to Miniflare's server could result in arbitrary HTTP and WebSocket requests being sent from the server. If Miniflare was configured to listen on external network interfaces (as was the default in wrangler until 3.19.0), an attacker on the local network could access other local servers.
miniflare
NPMFun, full-featured, fully-local simulator for Cloudflare Workers
NPMFun, full-featured, fully-local simulator for Cloudflare Workers>= 3.20230821.0, < 3.20231030.2OSV
cloudflare/miniflare
GitHub🔥 Fully-local simulator for Cloudflare Workers. For the latest version, see https://github.com/cloudflare/workers-sdk/tree/main/packages/miniflare.
GitHub🔥 Fully-local simulator for Cloudflare Workers. For the latest version, see https://github.com/cloudflare/workers-sdk/tree/main/packages/miniflare.>= 3.20230821.0, < 3.20231030.2NVD