MAL-2025-1958 Malicious code in workerd-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in workerd-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1585 Malicious code in workerd-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 864f13e0626ddbb05fb951a4a4217000d4d74c0e9935d0ca041b22f805b1ff98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workerd-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 864f13e0626ddbb05fb951a4a4217000d4d74c0e9935d0ca041b22f805b1ff98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Denial Of Service (DoS)

workerd is vulnerable to Denial of Service DoS attacks. The forEach function may wind up reading from the incorrect position in memory if a FormData object has more than 2^31 items, which would result in a segmentation fault, causing the application to crash...

GHSA-8VX6-69VG-C46F Buffer under-read in workerd

Impact Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach method could end up reading from the wrong location in memory while iterating over elements. This would most likely lead...

@miniflare/tre (=3.0.0-next.14), miniflare (>=0.20230628.0 <=0.20230908.0) +1 more potentially affected by CVE-2023-2512 via workerd (>=0.20230628.0 <=1.20230404.0)

workerd NPM version =0.20230628.0, =0.20230628.0, =0.0.0-3f61892d, =0.0.0-bcdc1fe5 Source cves: CVE-2023-2512 Source advisory: OSV:GHSA-8VX6-69VG-C46F...

PT-2023-19924 · Workerd · Workerd

Name of the Vulnerable Software and Affected Versions: workerd versions prior to v1.20230419.0 Description: The FormData API implementation in workerd was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach method could end up reading from the wro...