wasmtime (PyPI)

Advisories

Latest version

—

License

—

OpenSSF Scorecard

—

How to fix

Upgrading to 0.30.0 or later clears every advisory below that has a fix.

Upgrade commands

pip

pip install --upgrade "wasmtime>=0.30.0"

poetry

poetry add "wasmtime>=0.30.0"

uv add "wasmtime>=0.30.0"

Known vulnerabilities

Advisory	Severity	Affected	Fixed in
GHSA-hfr4-7c6c-48w2 Wasmtime has use-after-free bug after cloning `wasmtime::Linker`	Medium EPSS 0.12%	`<= 43.0.0`	No fix yet
GHSA-7qmx-3fpx-r45m Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations	Low EPSS 0.15%	`<= 19.0.0` `<= 19.0.1` `<= 19.0.2` `<= 20.0.0` `<= 20.0.1` `<= 20.0.2` `<= 21.0.0` `<= 21.0.1` `<= 22.0.0` `<= 23.0.0` `<= 23.0.1` `<= 23.0.2` `<= 24.0.0` `<= 25.0.0` `<= 25.0.1`	No fix yet
GHSA-75hq-h6g9-h4q5 Wasmtime vulnerable to panic when using a dropped extenref-typed element segment	Medium EPSS 0.32%	`<= 19.0.0`	No fix yet
GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime	Medium EPSS 0.36%	`< 0.30.0`	`0.30.0`
GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime	Medium EPSS 0.36%	`< 0.30.0`	`0.30.0`
GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime	Medium EPSS 0.36%	`>= 0.26.0, < 0.30.0`	`0.30.0`
GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime	Medium EPSS 0.36%	`< 0.30.0`	`0.30.0`
GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime	Medium EPSS 0.36%	`< 0.30.0`	`0.30.0`
GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime	Medium EPSS 0.36%	`< 0.30.0`	`0.30.0`
RUSTSEC-2021-0067 Memory access due to code generation flaw in Cranelift module	High EPSS 0.46%	`< 0.27.0`	`0.27.0`
RUSTSEC-2021-0067 Memory access due to code generation flaw in Cranelift module	High EPSS 0.46%	`< 0.27.0`	`0.27.0`

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor