@cloudflare/worker-bundler@0.2.4

QwenLM/Qwen3-VL@cloudflare/worker-bundler@0.2.4Sep 18, 2026by github-actions[bot]

Upgrading?

AI Summary

worker-bundler 0.2.4 raises the smol-toml dependency floor to version 1.7.2 to address a high-severity denial of service vulnerability in TOML parsing.

Key Highlights

  • smol-toml dependency updated to ^1.7.2
  • Fixes high-severity DOS vulnerability via malformed TOML
  • Picks up upstream fix from version 1.7.1

Full Release Notes

### Patch Changes

-   [#2288](https://github.com/cloudflare/agents/pull/2288) [`9efee5f`](https://github.com/cloudflare/agents/commit/9efee5f0c23d6a217fe4ba5e73c078e64e9cd28c) Thanks [@ben-reitz](https://github.com/ben-reitz)! - Raise the `smol-toml` floor to ^1.7.2, picking up the fix for a
    high-severity denial of service via malformed TOML (patched upstream
    in 1.7.1).

Related Repositories