CVE-2026-111446

Wheels versions 4.0.0 through 4.1.2 contain a vulnerability where password-less development tools are exposed under */wheels/ to remote clients when enablePublicComponent=true (the default in development). Prior to version 4.1.2, these tools lacked local-access restrictions; version 4.1.2 introdu...