Widget Wrangler, CVE-2026-25447

CVE, Research URL: CVE-2026-25447
Home page URL: Security reports for Widget Wrangler
Application: Widget Wrangler
Published on: Mar 25, 2026
Research Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Jonathan Daggerhart Widget Wrangler widget-wrangler allows Code Injection.This issue affects Widget Wrangler: from n/a through <= 2.3.9.
Affected versions: max 2.3.9.
Status: vulnerable