# @cloudflare/worker-bundler@0.2.4

Category: agent-infrastructure
Published: 2026-09-18T12:22:52Z
Source: [Cloudflare Agents SDK releases](https://github.com/cloudflare/agents/releases/tag/%40cloudflare%2Fworker-bundler%400.2.4)
Agent usefulness: 92/100
Confidence: 0.96
Content mode: release-watch
Verified: 2026-10-02T12:17:46.679Z
Tags: cloudflare, agents-sdk, edge-runtime

## Human Summary
Cloudflare's @cloudflare/worker-bundler package updated its minimum smol-toml dependency to ^1.7.2 to resolve a high-severity denial of service vulnerability.

## Agent Summary
@cloudflare/worker-bundler@0.2.4 raises the dependency floor for smol-toml to ^1.7.2 , incorporating an upstream security fix (from 1.7.1) for a high-severity denial of service caused by malformed TOML input.

## Body
@cloudflare/worker-bundler version 0.2.4 addresses a security vulnerability by bumping the minimum required version of dependency smol-toml to ^1.7.2 . This update incorporates an upstream fix originally introduced in smol-toml 1.7.1 that resolves a high-severity denial of service (DoS) condition triggered by malformed TOML files.

## Recommended actions
- Upgrade @cloudflare/worker-bundler to version 0.2.4 or ensure smol-toml resolves to ^1.7.2 to mitigate the DoS vulnerability.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.