Unverified Commit b3f12551 authored by Sandro Jäckel's avatar Sandro Jäckel Committed by GitHub
Browse files

wrangler_1: mark as vulnerable; wrangler: 4.59.3 -> 4.60.0 (#482678)

parents d8ed1526 0763177a

pkgs/by-name/wr/wrangler/package.nix

+2 −2
Original line number Diff line number Diff line
@@ -19,13 +19,13 @@ 
}:

stdenv.mkDerivation (finalAttrs: {

  pname = "wrangler";

  version = "4.59.3";

  version = "4.60.0";



  src = fetchFromGitHub {

    owner = "cloudflare";

    repo = "workers-sdk";

    rev = "wrangler@${finalAttrs.version}";

    hash = "sha256-DKKngT58p8x+Qzl550468JDOQuymQmzPwkLL/iB7Aa4=";

    hash = "sha256-lRdQrUgEr7KS/05BXZW7h3JS91d3gM8w+RLlaLC98RU=";

  };



  pnpmDeps = fetchPnpmDeps {

pkgs/by-name/wr/wrangler_1/package.nix

+3 −0
Original line number Diff line number Diff line
@@ -41,6 +41,9 @@ rustPlatform.buildRustPackage rec { 
    description = "CLI tool designed for folks who are interested in using Cloudflare Workers";

    mainProgram = "wrangler";

    homepage = "https://github.com/cloudflare/wrangler";

    knownVulnerabilities = [

      "CVE-2026-0933: Malicious backdoor via a command injection allowing unauthorized remote code execution"

    ];

    license = with lib.licenses; [

      asl20 # or

      mit