Description<\/p>\n
Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in `src\/index.ts` reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as CLOUDFLARE_API_TOKEN and GITHUB_TOKEN to an attacker. Because this repository has been deprecated since 2024, Cloudflare will not be issuing patches. To remediate this issue, we recommend migrating to `cloudflare\/wrangler-action` immediately. Consumers who have already migrated are not affected.<\/p>\n
Sunset Date<\/p>\n
The cloudflare\/pages-action repository will be removed on 2026-09-18. Consumers must complete migration before 18th September to avoid CI disruption.<\/p>\n
Affected Versions<\/p>\n
All published versions of cloudflare\/pages-action, including consumers pinned to the v1 moving tag.<\/p>\n
Patched Versions<\/p>\n
None. This repository will not receive further updates, including security patches.<\/p>\n
Resolution \/ Migration Path
\nMigrate all workflows using cloudflare\/pages-action to `cloudflare\/wrangler-action` before 2026-09-18. Refer to the wrangler-action README for the equivalent step configuration and migration guidance.<\/p>\n
Credit<\/p>\n
Thanks to @agentka99 and @beg1nn3r for reporting their findings via Cloudflare’s HackerOne program that informe<\/p>\n","protected":false},"excerpt":{"rendered":"
Description<\/p>\n
Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in `src\/index.ts` reachable from certain<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-6117","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/6117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6117"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}