How many cloudflare workers-sdk CVEs are in CISA KEV?

None of cloudflare workers-sdk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for cloudflare workers-sdk vulnerabilities?

Yes — 1 of cloudflare workers-sdk's CVEs have a known public exploit.

Which versions of cloudflare workers-sdk are affected?

1,697 distinct cloudflare workers-sdk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in cloudflare workers-sdk CVEs?

cloudflare workers-sdk's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-269 (Improper Privilege Management).

How many critical cloudflare workers-sdk vulnerabilities are there?

cloudflare workers-sdk has 1 critical and 2 high-severity CVEs.

What is the average severity of cloudflare workers-sdk CVEs?

The average CVSS base score across cloudflare workers-sdk's scored CVEs is 7.4.

cloudflare workers-sdk Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: cloudflare workers-sdk vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

cloudflare workers-sdk Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

cloudflare workers-sdk has 6 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting cloudflare workers-sdk, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of cloudflare workers-sdk's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of cloudflare workers-sdk's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of cloudflare workers-sdk's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every cloudflare workers-sdk version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

@cloudflare/pages-shared@0.11.05 CVEs
@cloudflare/pages-shared@0.11.15 CVEs
create-cloudflare@2.7.05 CVEs
create-cloudflare@2.7.15 CVEs
miniflare@3.20230821.05 CVEs
miniflare@3.20230904.05 CVEs
miniflare@3.20230918.05 CVEs
miniflare@3.20230922.05 CVEs
miniflare@3.20231002.05 CVEs
miniflare@3.20231002.15 CVEs
miniflare@3.20231010.0

Common weakness types

The CWE weakness categories most often found in cloudflare workers-sdk CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many cloudflare workers-sdk CVEs were published each year.

2023

2025

2026

Other cloudflare products

Browse vulnerabilities for other products by cloudflare.

WARP19 CVEs cfrpki9 CVEs github.com/cloudflare/cfrpki9 CVEs octorpki9 CVEs quiche9 CVEs pingora4 CVEs WARP Client4 CVEs wrangler4 CVEs

Frequently asked questions

Common questions about cloudflare workers-sdk vulnerabilities.

How many CVEs does cloudflare workers-sdk have?: cloudflare workers-sdk has 6 published CVE records since 2023.
How many cloudflare workers-sdk CVEs are in CISA KEV?: None of cloudflare workers-sdk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for cloudflare workers-sdk vulnerabilities?: Yes — 1 of cloudflare workers-sdk's CVEs have a known public exploit.
Which versions of cloudflare workers-sdk are affected?: 1,697 distinct cloudflare workers-sdk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in cloudflare workers-sdk CVEs?: cloudflare workers-sdk's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-269 (Improper Privilege Management).
How many critical cloudflare workers-sdk vulnerabilities are there?: cloudflare workers-sdk has 1 critical and 2 high-severity CVEs.
What is the average severity of cloudflare workers-sdk CVEs?: The average CVSS base score across cloudflare workers-sdk's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track cloudflare workers-sdk vulnerabilities

Monitor new cloudflare workers-sdk vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

cloudflare workers-sdk Vulnerabilities