Description

While working on BaseAI project, I identified a security vulnerability in the Wrangler CLI during the deployment process. The vulnerability exists in the wrangler pages deploy command and is related to improper handling of the --commit-hash parameter. This parameter is directly passed into a shell command without proper validation or sanitization, which leads to a command injection vulnerability (CWE-78).

CVE Report
CVE Link

Code example

No response

Additional context

No response