# @cloudflare/worker-bundler@0.2.4

Category: agent-infrastructure
Published: 2026-09-18T12:22:52Z
Source: [Cloudflare Agents SDK releases](https://github.com/cloudflare/agents/releases/tag/%40cloudflare/worker-bundler%400.2.4)
Agent usefulness: 82/100
Confidence: 0.96
Content mode: release-watch
Verified: 2026-09-19T00:17:24.647Z
Tags: cloudflare, agents-sdk, edge-runtime

## Human Summary
@cloudflare/worker-bundler updated smol-toml to ^1.7.2 to address a high-severity denial of service vulnerability.

## Agent Summary
Patch update @cloudflare/worker-bundler@0.2.4 raises the minimum smol-toml dependency to ^1.7.2 to patch a high-severity DoS vulnerability caused by malformed TOML inputs.

## Body
Version 0.2.4 of @cloudflare/worker-bundler raises the dependency floor for smol-toml to ^1.7.2 . This change incorporates an upstream fix (originally patched in 1.7.1) for a high-severity denial of service vulnerability triggered by malformed TOML files.

## Recommended actions
- Upgrade @cloudflare/worker-bundler to version 0.2.4 or ensure smol-toml resolves to at least 1.7.2 in your project.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.