@clevercanyon/dev-deps (>=1.0.274, <=1.0.287), @flare-city/test (>=0.2.0, <=0.4.3) potentially affected by CVE-2023-7079 via wrangler (>=3.15.0, <=3.18.0)

wrangler NPM version =3.15.0, =1.0.274, =0.2.0, =0.4.3 Source cves: CVE-2023-7079 Source advisory: OSV:GHSA-CFPH-4QQH-W828...

CVE-2023-7079

Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file...

CVE-2023-7079 Arbitrary remote file read in Wrangler dev server

Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file...

CVE-2023-7079

Summary (CVE-2023-7079) : Affects Wrangler’s dev server. By sending specially crafted HTTP requests and inspector messages, an attacker on the local network could read arbitrary files from a user’s machine. The issue enables local-file discovery/read via the dev server when a user visits a malici...

CVE-2023-7079 Arbitrary remote file read in Wrangler dev server

Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file...