wasmtime (crates.io)
Advisories
181
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 50.0.1 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p wasmtime --precise 50.0.1Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| RUSTSEC-2026-0422 Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-check |
Low | >= 47.0.0, < 48.0.8>= 49.0.0, < 49.0.5>= 50.0.0, < 50.0.1 | 48.0.849.0.550.0.1 |
| RUSTSEC-2026-0423 Cross-engine type confusion with host-created struct-types-with-supertypes |
Not rated yet | >= 47.0.0, < 48.0.8>= 49.0.0, < 49.0.5>= 50.0.0, < 50.0.1 | 48.0.849.0.550.0.1 |
| RUSTSEC-2026-0424 Unchecked memory usage in transferring borrowed resources between components |
Not rated yet | >= 0.0.0-0, < 36.0.20>= 37.0.0, < 48.0.8>= 49.0.0, < 49.0.5>= 50.0.0, < 50.0.1 | 36.0.2048.0.849.0.550.0.1 |
| GHSA-897f-g5gm-fmxm Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation |
Critical EPSS 0.45% |
>= 37.0.0, < 43.0.0 | 43.0.0 |
| GHSA-9pvw-hwfg-92h5 Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type |
Medium EPSS 0.43% |
>= 46.0.0, < 48.0.7 | 48.0.7 |
| GHSA-9pvw-hwfg-92h5 Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type |
Medium EPSS 0.43% |
>= 49.0.0, < 49.0.4 | 49.0.4 |
| GHSA-9pvw-hwfg-92h5 Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type |
Medium EPSS 0.43% |
>= 46.0.0, < 48.0.7>= 49.0.0, < 49.0.4 | 48.0.749.0.4 |
| RUSTSEC-2026-0379 Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction |
Critical EPSS 0.99% |
< 36.0.19 | 36.0.19 |
| RUSTSEC-2026-0379 Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction |
Critical EPSS 0.99% |
>= 49.0.0, < 49.0.4 | 49.0.4 |
| RUSTSEC-2026-0379 Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction |
Critical EPSS 0.99% |
< 36.0.19 | 36.0.19 |
| RUSTSEC-2026-0379 Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction |
Critical EPSS 0.99% |
>= 49.0.0, < 49.0.4 | 49.0.4 |
| RUSTSEC-2026-0379 Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction |
Critical EPSS 0.99% |
>= 0.0.0-0, < 36.0.19>= 37.0.0, < 48.0.7>= 49.0.0, < 49.0.4 | 36.0.1948.0.749.0.4 |
| RUSTSEC-2026-0379 Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction |
Critical EPSS 0.99% |
>= 37.0.0, < 48.0.7 | 48.0.7 |
| GHSA-897f-g5gm-fmxm Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation |
Critical EPSS 0.45% |
< 36.0.19 | 36.0.19 |
| RUSTSEC-2026-0379 Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction |
Critical EPSS 0.99% |
>= 37.0.0, < 48.0.7 | 48.0.7 |
| GHSA-897f-g5gm-fmxm Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation |
Critical EPSS 0.45% |
>= 0.0.0-0, < 36.0.19>= 37.0.0, < 43.0.0 | 36.0.1943.0.0 |
| RUSTSEC-2026-0353 Panic when invoking an async-lifted function via `call` |
Not rated yet EPSS 0.21% |
>= 46.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0358 Yielding in a component start function can lead to a host panic |
Not rated yet EPSS 0.21% |
>= 46.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0362 Wasmtime may not properly enforce async-entrypoint requirement |
Not rated yet EPSS 0.21% |
>= 42.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0360 Overlapping string transcode in a fused adapter can panic |
Not rated yet EPSS 0.21% |
>= 49.0.0, < 49.0.3 | 49.0.3 |
| RUSTSEC-2026-0361 Panic when pending calls are run after a trap |
Not rated yet EPSS 0.25% |
>= 46.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0363 Component-model handle tables are capped only per instance and charged to no limit |
Medium EPSS 0.15% |
>= 0.0.0-0, < 36.0.18>= 37.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 36.0.1848.0.649.0.3 |
| RUSTSEC-2026-0364 Exception tags can cause host data structures to be unaligned |
Not rated yet EPSS 0.21% |
>= 47.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0355 Panic viewing component model stream or future as the wrong type |
Not rated yet EPSS 0.21% |
>= 46.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0359 Stack overflow dropping a long chain of recursive types |
Medium EPSS 0.40% |
>= 42.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0357 Out-of-bounds zero-length stream writes can panic |
Not rated yet EPSS 0.21% |
>= 46.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0356 Panic on erroneous call-to-host from guest realloc call |
Medium EPSS 0.37% |
>= 46.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0354 Host panic when component `call_async` is cancelled under some conditions |
Not rated yet EPSS 0.25% |
>= 46.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 48.0.649.0.3 |
| RUSTSEC-2026-0327 Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow |
Critical EPSS 0.31% |
>= 39.0.0, < 48.0.4>= 49.0.0, < 49.0.2 | 48.0.449.0.2 |
| RUSTSEC-2026-0326 Rooting for GC values live across `try_call` may be missing, causing GC heap corruption |
Medium EPSS 0.28% |
>= 47.0.0, < 48.0.4>= 49.0.0, < 49.0.2 | 48.0.449.0.2 |
| RUSTSEC-2026-0325 Mis-typed WebAssembly tag imports can lead to GC heap corruption |
Medium EPSS 0.18% |
>= 47.0.0, < 48.0.4>= 49.0.0, < 49.0.2 | 48.0.449.0.2 |
| RUSTSEC-2026-0315 `call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification |
Medium EPSS 0.24% |
>= 47.0.0, < 48.0.3>= 49.0.0, < 49.0.1 | 48.0.349.0.1 |
| RUSTSEC-2026-0316 Dynamic record lifting can allocate beyond the hostcall fuel limit |
Low EPSS 0.15% |
>= 0.0.0-0, < 36.0.16>= 37.0.0, < 48.0.3>= 49.0.0, < 49.0.1 | 36.0.1648.0.349.0.1 |
| RUSTSEC-2026-0268 Guest controlled-size host heap allocation through WASIp3 streams |
Medium EPSS 0.17% |
>= 46.0.0, < 46.0.3>= 47.0.0, < 47.0.4 | 46.0.347.0.4 |
| RUSTSEC-2026-0269 Filesystem sandbox escape when paths or symlinks contain trailing slashes |
High EPSS 0.24% |
>= 0.0.0-0, < 24.0.13>= 25.0.0, < 36.0.14>= 37.0.0, < 46.0.3>= 47.0.0, < 47.0.4 | 24.0.1336.0.1446.0.347.0.4 |
| GHSA-2hw9-mc66-jc2q Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state |
Low EPSS 0.28% |
>= 46.0.0, < 46.0.2 | 46.0.2 |
| RUSTSEC-2026-0222 Stores can mix up type indices between engines |
Low EPSS 0.09% |
>= 0.0.0-0, < 24.0.12>= 25.0.0, < 36.0.13>= 37.0.0, < 46.0.2>= 47.0.0, < 47.0.3 | 24.0.1236.0.1346.0.247.0.3 |
| GHSA-2hw9-mc66-jc2q Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state |
Low EPSS 0.28% |
>= 47.0.0, < 47.0.3 | 47.0.3 |
| GHSA-2hw9-mc66-jc2q Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state |
Low EPSS 0.28% |
>= 46.0.0, < 46.0.2>= 47.0.0, < 47.0.3 | 46.0.247.0.3 |
| GHSA-p8xm-42r7-89xg wasmtime has a panic when allocating a table exceeding the size of the host's address space |
High EPSS 0.32% |
>= 30.0.0, < 36.0.8 | 36.0.8 |
| GHSA-p8xm-42r7-89xg wasmtime has a panic when allocating a table exceeding the size of the host's address space |
High EPSS 0.32% |
>= 30.0.0, < 36.0.8>= 37.0.0, < 43.0.2>= 44.0.0, < 44.0.1 | 36.0.843.0.244.0.1 |
| GHSA-p8xm-42r7-89xg wasmtime has a panic when allocating a table exceeding the size of the host's address space |
High EPSS 0.32% |
>= 37.0.0, < 43.0.2 | 43.0.2 |
| GHSA-jxhv-7h78-9775 Wasmtime: Panic when transcoding misaligned utf-16 strings |
Medium EPSS 0.35% |
>= 0.0.0-0, < 24.0.7>= 25.0.0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 24.0.736.0.742.0.243.0.1 |
| GHSA-m758-wjhj-p3jq Wasmtime has a possible panic when lifting `flags` component value |
High EPSS 0.32% |
>= 25.0.0, < 36.0.7 | 36.0.7 |
| GHSA-m758-wjhj-p3jq Wasmtime has a possible panic when lifting `flags` component value |
High EPSS 0.32% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-xx5w-cvp6-jv83 Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access |
Critical EPSS 0.28% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-xx5w-cvp6-jv83 Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access |
Critical EPSS 0.28% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-xx5w-cvp6-jv83 Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access |
Critical EPSS 0.28% |
>= 25.0.0, < 36.0.7 | 36.0.7 |
| GHSA-qqfj-4vcm-26hv Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 |
Medium EPSS 0.23% |
>= 0.0.0-0, < 24.0.7>= 25.0.0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 24.0.736.0.742.0.243.0.1 |
| GHSA-qqfj-4vcm-26hv Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 |
Medium EPSS 0.23% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-qqfj-4vcm-26hv Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 |
Medium EPSS 0.23% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-qqfj-4vcm-26hv Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 |
Medium EPSS 0.23% |
>= 25.0.0, < 36.0.7 | 36.0.7 |
| GHSA-qqfj-4vcm-26hv Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 |
Medium EPSS 0.23% |
< 24.0.7 | 24.0.7 |
| GHSA-q49f-xg75-m9xw Wasmtime has host panic when Winch compiler executes `table.fill` |
High EPSS 0.36% |
>= 0.0.0-0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 36.0.742.0.243.0.1 |
| GHSA-q49f-xg75-m9xw Wasmtime has host panic when Winch compiler executes `table.fill` |
High EPSS 0.36% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-q49f-xg75-m9xw Wasmtime has host panic when Winch compiler executes `table.fill` |
High EPSS 0.36% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-q49f-xg75-m9xw Wasmtime has host panic when Winch compiler executes `table.fill` |
High EPSS 0.36% |
>= 25.0.0, < 36.0.7 | 36.0.7 |
| GHSA-m9w2-8782-2946 Wasmtime has host data leakage with 64-bit tables and Winch |
Medium EPSS 0.32% |
>= 0.0.0-0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 36.0.742.0.243.0.1 |
| GHSA-m9w2-8782-2946 Wasmtime has host data leakage with 64-bit tables and Winch |
Medium EPSS 0.32% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-m9w2-8782-2946 Wasmtime has host data leakage with 64-bit tables and Winch |
Medium EPSS 0.32% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-xx5w-cvp6-jv83 Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access |
Critical EPSS 0.28% |
>= 0.0.0-0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 36.0.742.0.243.0.1 |
| GHSA-m9w2-8782-2946 Wasmtime has host data leakage with 64-bit tables and Winch |
Medium EPSS 0.32% |
>= 25.0.0, < 36.0.7 | 36.0.7 |
| GHSA-m758-wjhj-p3jq Wasmtime has a possible panic when lifting `flags` component value |
High EPSS 0.32% |
>= 0.0.0-0, < 24.0.7>= 25.0.0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 24.0.736.0.742.0.243.0.1 |
| GHSA-m758-wjhj-p3jq Wasmtime has a possible panic when lifting `flags` component value |
High EPSS 0.32% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-394w-hwhg-8vgm Wasmtime has out-of-bounds write or crash when transcoding component model strings |
Medium EPSS 0.22% |
< 24.0.7 | 24.0.7 |
| GHSA-394w-hwhg-8vgm Wasmtime has out-of-bounds write or crash when transcoding component model strings |
Medium EPSS 0.22% |
>= 25.0.0, < 36.0.7 | 36.0.7 |
| GHSA-hx6p-xpx3-jvvv Wasmtime: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding |
High EPSS 0.38% |
>= 25.0.0, < 36.0.7 | 36.0.7 |
| GHSA-hx6p-xpx3-jvvv Wasmtime: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding |
High EPSS 0.38% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-hx6p-xpx3-jvvv Wasmtime: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding |
High EPSS 0.38% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-hx6p-xpx3-jvvv Wasmtime: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding |
High EPSS 0.38% |
>= 0.0.0-0, < 24.0.7>= 25.0.0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 24.0.736.0.742.0.243.0.1 |
| GHSA-jhxm-h53p-jm7w Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift |
High EPSS 0.32% |
>= 32.0.0, < 36.0.7 | 36.0.7 |
| GHSA-jhxm-h53p-jm7w Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift |
High EPSS 0.32% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-jhxm-h53p-jm7w Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift |
High EPSS 0.32% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-jhxm-h53p-jm7w Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift |
High EPSS 0.32% |
>= 0.0.0-0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 36.0.742.0.243.0.1 |
| GHSA-hfr4-7c6c-48w2 Wasmtime has use-after-free bug after cloning `wasmtime::Linker` |
Medium EPSS 0.12% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-hfr4-7c6c-48w2 Wasmtime has use-after-free bug after cloning `wasmtime::Linker` |
Medium EPSS 0.12% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-jxhv-7h78-9775 Wasmtime: Panic when transcoding misaligned utf-16 strings |
Medium EPSS 0.35% |
< 24.0.7 | 24.0.7 |
| GHSA-jxhv-7h78-9775 Wasmtime: Panic when transcoding misaligned utf-16 strings |
Medium EPSS 0.35% |
>= 25.0.0, < 36.0.7 | 36.0.7 |
| GHSA-jxhv-7h78-9775 Wasmtime: Panic when transcoding misaligned utf-16 strings |
Medium EPSS 0.35% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-jxhv-7h78-9775 Wasmtime: Panic when transcoding misaligned utf-16 strings |
Medium EPSS 0.35% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-m758-wjhj-p3jq Wasmtime has a possible panic when lifting `flags` component value |
High EPSS 0.32% |
< 24.0.7 | 24.0.7 |
| GHSA-394w-hwhg-8vgm Wasmtime has out-of-bounds write or crash when transcoding component model strings |
Medium EPSS 0.22% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-394w-hwhg-8vgm Wasmtime has out-of-bounds write or crash when transcoding component model strings |
Medium EPSS 0.22% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-394w-hwhg-8vgm Wasmtime has out-of-bounds write or crash when transcoding component model strings |
Medium EPSS 0.22% |
>= 0.0.0-0, < 24.0.7>= 25.0.0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 24.0.736.0.742.0.243.0.1 |
| GHSA-6wgr-89rj-399p Wasmtime has data leakage between pooling allocator instances |
Medium EPSS 0.29% |
>= 28.0.0, < 36.0.7 | 36.0.7 |
| GHSA-6wgr-89rj-399p Wasmtime has data leakage between pooling allocator instances |
Medium EPSS 0.29% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-6wgr-89rj-399p Wasmtime has data leakage between pooling allocator instances |
Medium EPSS 0.29% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-6wgr-89rj-399p Wasmtime has data leakage between pooling allocator instances |
Medium EPSS 0.29% |
>= 0.0.0-0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 36.0.742.0.243.0.1 |
| GHSA-f984-pcp8-v2p7 Wasmtime has improperly masked return value from `table.grow` with Winch compiler backend |
High EPSS 0.21% |
>= 25.0.0, < 36.0.7 | 36.0.7 |
| GHSA-f984-pcp8-v2p7 Wasmtime has improperly masked return value from `table.grow` with Winch compiler backend |
High EPSS 0.21% |
>= 37.0.0, < 42.0.2 | 42.0.2 |
| GHSA-f984-pcp8-v2p7 Wasmtime has improperly masked return value from `table.grow` with Winch compiler backend |
High EPSS 0.21% |
>= 43.0.0, < 43.0.1 | 43.0.1 |
| GHSA-f984-pcp8-v2p7 Wasmtime has improperly masked return value from `table.grow` with Winch compiler backend |
High EPSS 0.21% |
>= 0.0.0-0, < 36.0.7>= 37.0.0, < 42.0.2>= 43.0.0, < 43.0.1 | 36.0.742.0.243.0.1 |
| GHSA-hx6p-xpx3-jvvv Wasmtime: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding |
High EPSS 0.38% |
< 24.0.7 | 24.0.7 |
| GHSA-xjhv-v822-pf94 Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future |
High EPSS 0.41% |
>= 39.0.0, < 40.0.4>= 41.0.0, < 41.0.4 | 40.0.441.0.4 |
| GHSA-xjhv-v822-pf94 Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future |
High EPSS 0.41% |
>= 41.0.0, < 41.0.4 | 41.0.4 |
| GHSA-xjhv-v822-pf94 Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future |
High EPSS 0.41% |
>= 39.0.0, < 40.0.4 | 40.0.4 |
| GHSA-852m-cvvp-9p4w Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion |
Medium EPSS 0.40% |
>= 0.0.0-0, < 24.0.6>= 25.0.0, < 36.0.6>= 37.0.0, < 40.0.4>= 41.0.0, < 41.0.4 | 24.0.636.0.640.0.441.0.4 |
| GHSA-852m-cvvp-9p4w Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion |
Medium EPSS 0.40% |
>= 37.0.0, < 40.0.4 | 40.0.4 |
| GHSA-852m-cvvp-9p4w Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion |
Medium EPSS 0.40% |
>= 25.0.0, < 36.0.6 | 36.0.6 |
| GHSA-852m-cvvp-9p4w Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion |
Medium EPSS 0.40% |
< 24.0.6 | 24.0.6 |
| GHSA-243v-98vx-264h Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance |
High EPSS 0.52% |
>= 0.0.0-0, < 24.0.6>= 25.0.0, < 36.0.6>= 37.0.0, < 40.0.4>= 41.0.0, < 41.0.4 | 24.0.636.0.640.0.441.0.4 |
| GHSA-243v-98vx-264h Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance |
High EPSS 0.52% |
>= 37.0.0, < 40.0.4 | 40.0.4 |
| GHSA-243v-98vx-264h Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance |
High EPSS 0.52% |
>= 25.0.0, < 36.0.6 | 36.0.6 |
| GHSA-243v-98vx-264h Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance |
High EPSS 0.52% |
< 24.0.6 | 24.0.6 |
| GHSA-vc8c-j3xm-xj73 Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 |
Medium EPSS 0.25% |
>= 37.0.0, < 40.0.3 | 40.0.3 |
| GHSA-vc8c-j3xm-xj73 Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 |
Medium EPSS 0.25% |
>= 29.0.0, < 36.0.5 | 36.0.5 |
| GHSA-vc8c-j3xm-xj73 Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 |
Medium EPSS 0.25% |
>= 29.0.0, < 36.0.5>= 37.0.0, < 40.0.3>= 41.0.0, < 41.0.1 | 36.0.540.0.341.0.1 |
| GHSA-vc8c-j3xm-xj73 Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 |
Medium EPSS 0.25% |
>= 41.0.0, < 41.0.1 | 41.0.1 |
| GHSA-hc7m-r6v8-hg9q Wasmtime provides unsound API access to a WebAssembly shared linear memory |
Low EPSS 0.12% |
< 24.0.5 | 24.0.5 |
| GHSA-hc7m-r6v8-hg9q Wasmtime provides unsound API access to a WebAssembly shared linear memory |
Low EPSS 0.12% |
>= 38.0.0, < 38.0.4 | 38.0.4 |
| GHSA-hc7m-r6v8-hg9q Wasmtime provides unsound API access to a WebAssembly shared linear memory |
Low EPSS 0.12% |
>= 37.0.0, < 37.0.3 | 37.0.3 |
| GHSA-hc7m-r6v8-hg9q Wasmtime provides unsound API access to a WebAssembly shared linear memory |
Low EPSS 0.12% |
>= 26.0.0, < 36.0.3 | 36.0.3 |
| GHSA-hc7m-r6v8-hg9q Wasmtime provides unsound API access to a WebAssembly shared linear memory |
Low EPSS 0.12% |
>= 0.0.0-0, < 24.0.5>= 25.0.0, < 36.0.3>= 37.0.0, < 37.0.3>= 38.0.0, < 38.0.4 | 24.0.536.0.337.0.338.0.4 |
| GHSA-fm79-3f68-h2fc Wasmtime CLI is vulnerable to host panic through its fd_renumber function |
Low EPSS 0.38% |
>= 10.0.0, < 24.0.4 | 24.0.4 |
| GHSA-fm79-3f68-h2fc Wasmtime CLI is vulnerable to host panic through its fd_renumber function |
Low EPSS 0.38% |
>= 33.0.0, < 33.0.2 | 33.0.2 |
| GHSA-fm79-3f68-h2fc Wasmtime CLI is vulnerable to host panic through its fd_renumber function |
Low EPSS 0.38% |
>= 34.0.0, < 34.0.2 | 34.0.2 |
| GHSA-fm79-3f68-h2fc Wasmtime CLI is vulnerable to host panic through its fd_renumber function |
Low EPSS 0.38% |
>= 10.0.0, < 24.0.4>= 25.0.0, < 33.0.2>= 34.0.0, < 34.0.2 | 24.0.433.0.234.0.2 |
| GHSA-4h67-722j-5pmc Wasmtime vulnerable to segfault when using component resources |
Low EPSS 0.41% |
>= 38.0.0, < 38.0.3 | 38.0.3 |
| GHSA-4h67-722j-5pmc Wasmtime vulnerable to segfault when using component resources |
Low EPSS 0.41% |
>= 38.0.0, < 38.0.3 | 38.0.3 |
| GHSA-c2f5-jxjv-2hh8 Wasmtime doesn't fully sandbox all the Windows device filenames |
Critical EPSS 0.84% |
< 24.0.2 | 24.0.2 |
| GHSA-c2f5-jxjv-2hh8 Wasmtime doesn't fully sandbox all the Windows device filenames |
Critical EPSS 0.84% |
>= 0.0.0-0, < 24.0.2>= 25.0.0, < 25.0.3>= 26.0.0, < 26.0.1 | 24.0.225.0.326.0.1 |
| GHSA-c2f5-jxjv-2hh8 Wasmtime doesn't fully sandbox all the Windows device filenames |
Critical EPSS 0.84% |
>= 26.0.0, < 26.0.1 | 26.0.1 |
| GHSA-c2f5-jxjv-2hh8 Wasmtime doesn't fully sandbox all the Windows device filenames |
Critical EPSS 0.84% |
>= 25.0.0, < 25.0.3 | 25.0.3 |
| GHSA-7qmx-3fpx-r45m Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations |
Low EPSS 0.15% |
>= 25.0.0, < 25.0.2 | 25.0.2 |
| GHSA-7qmx-3fpx-r45m Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations |
Low EPSS 0.15% |
>= 24.0.0, < 24.0.1 | 24.0.1 |
| GHSA-7qmx-3fpx-r45m Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations |
Low EPSS 0.15% |
>= 19.0.0, < 21.0.2 | 21.0.2 |
| GHSA-7qmx-3fpx-r45m Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations |
Low EPSS 0.15% |
>= 23.0.0, < 23.0.3 | 23.0.3 |
| GHSA-7qmx-3fpx-r45m Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations |
Low EPSS 0.15% |
>= 19.0.0, < 21.0.2>= 22.0.0, < 22.0.1>= 23.0.0, < 23.0.3>= 24.0.0, < 24.0.1>= 25.0.0, < 25.0.2 | 21.0.222.0.123.0.324.0.125.0.2 |
| GHSA-7qmx-3fpx-r45m Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations |
Low EPSS 0.15% |
>= 22.0.0, < 22.0.1 | 22.0.1 |
| GHSA-q8hx-mm92-4wvg wasmtime has a runtime crash when combining tail calls with trapping imports |
Medium EPSS 0.24% |
>= 25.0.0, < 25.0.2 | 25.0.2 |
| GHSA-q8hx-mm92-4wvg wasmtime has a runtime crash when combining tail calls with trapping imports |
Medium EPSS 0.24% |
>= 12.0.0, < 21.0.2 | 21.0.2 |
| GHSA-q8hx-mm92-4wvg wasmtime has a runtime crash when combining tail calls with trapping imports |
Medium EPSS 0.24% |
>= 22.0.0, < 22.0.1 | 22.0.1 |
| GHSA-q8hx-mm92-4wvg wasmtime has a runtime crash when combining tail calls with trapping imports |
Medium EPSS 0.24% |
>= 23.0.0, < 23.0.3 | 23.0.3 |
| GHSA-q8hx-mm92-4wvg wasmtime has a runtime crash when combining tail calls with trapping imports |
Medium EPSS 0.24% |
>= 21.0.0, < 21.0.2>= 22.0.0, < 22.0.1>= 23.0.0, < 23.0.3>= 24.0.0, < 24.0.1>= 25.0.0, < 25.0.2 | 21.0.222.0.123.0.324.0.125.0.2 |
| GHSA-q8hx-mm92-4wvg wasmtime has a runtime crash when combining tail calls with trapping imports |
Medium EPSS 0.24% |
>= 24.0.0, < 24.0.1 | 24.0.1 |
| GHSA-75hq-h6g9-h4q5 Wasmtime vulnerable to panic when using a dropped extenref-typed element segment |
Medium EPSS 0.32% |
>= 19.0.0, < 19.0.1 | 19.0.1 |
| GHSA-75hq-h6g9-h4q5 Wasmtime vulnerable to panic when using a dropped extenref-typed element segment |
Medium EPSS 0.32% |
>= 19.0.0, < 19.0.1 | 19.0.1 |
| GHSA-gw5p-q8mj-p7gh Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 |
Medium EPSS 0.67% |
>= 11.0.0, < 11.0.2 | 11.0.2 |
| GHSA-gw5p-q8mj-p7gh Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 |
Medium EPSS 0.67% |
>= 0.0.0-0, < 10.0.2>= 11.0.0, < 11.0.2>= 12.0.0, < 12.0.2 | 10.0.211.0.212.0.2 |
| GHSA-gw5p-q8mj-p7gh Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 |
Medium EPSS 0.67% |
>= 12.0.0, < 12.0.2 | 12.0.2 |
| GHSA-gw5p-q8mj-p7gh Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 |
Medium EPSS 0.67% |
>= 10.0.0, < 10.0.2 | 10.0.2 |
| GHSA-ch89-5g45-qwc7 Undefined Behavior in Rust runtime functions |
High EPSS 0.45% |
>= 7.0.0, < 7.0.1 | 7.0.1 |
| GHSA-ch89-5g45-qwc7 Undefined Behavior in Rust runtime functions |
High EPSS 0.45% |
>= 0.0.0-0, < 6.0.2>= 7.0.0, < 7.0.1>= 8.0.0, < 8.0.1 | 6.0.27.0.18.0.1 |
| GHSA-ch89-5g45-qwc7 Undefined Behavior in Rust runtime functions |
High EPSS 0.45% |
>= 8.0.0, < 8.0.1 | 8.0.1 |
| GHSA-ch89-5g45-qwc7 Undefined Behavior in Rust runtime functions |
High EPSS 0.45% |
< 6.0.2 | 6.0.2 |
| GHSA-xm67-587q-r2vw wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64 |
Medium EPSS 0.62% |
>= 6.0.0, < 6.0.1 | 6.0.1 |
| GHSA-xm67-587q-r2vw wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64 |
Medium EPSS 0.62% |
>= 0.0.0-0, < 4.0.1>= 5.0.0, < 5.0.1>= 6.0.0, < 6.0.1 | 4.0.15.0.16.0.1 |
| GHSA-xm67-587q-r2vw wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64 |
Medium EPSS 0.62% |
>= 5.0.0, < 5.0.1 | 5.0.1 |
| GHSA-xm67-587q-r2vw wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64 |
Medium EPSS 0.62% |
>= 1.0.0, < 4.0.1 | 4.0.1 |
| GHSA-ff4p-7xrq-q5r8 wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64 |
Critical EPSS 1.25% |
>= 6.0.0, < 6.0.1 | 6.0.1 |
| GHSA-ff4p-7xrq-q5r8 wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64 |
Critical EPSS 1.25% |
>= 0.0.0-0, < 4.0.1>= 5.0.0, < 5.0.1>= 6.0.0, < 6.0.1 | 4.0.15.0.16.0.1 |
| GHSA-ff4p-7xrq-q5r8 wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64 |
Critical EPSS 1.25% |
>= 0.37.0, < 4.0.1 | 4.0.1 |
| GHSA-ff4p-7xrq-q5r8 wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64 |
Critical EPSS 1.25% |
>= 5.0.0, < 5.0.1 | 5.0.1 |
| GHSA-h84q-m8rr-3v9q wasmtime_trap_code C API function has out of bounds write vulnerability |
Critical EPSS 0.35% |
>= 0.0.0-0, < 1.0.2>= 2.0.0, < 2.0.2 | 1.0.22.0.2 |
| GHSA-h84q-m8rr-3v9q wasmtime_trap_code C API function has out of bounds write vulnerability |
Critical EPSS 0.35% |
< 1.0.2 | 1.0.2 |
| GHSA-h84q-m8rr-3v9q wasmtime_trap_code C API function has out of bounds write vulnerability |
Critical EPSS 0.35% |
>= 2.0.0, < 2.0.2 | 2.0.2 |
| GHSA-wh6w-3828-g9qf Wasmtime may have data leakage between instances in the pooling allocator |
High EPSS 0.75% |
< 1.0.2 | 1.0.2 |
| GHSA-wh6w-3828-g9qf Wasmtime may have data leakage between instances in the pooling allocator |
High EPSS 0.75% |
>= 2.0.0, < 2.0.2 | 2.0.2 |
| GHSA-44mr-8vmm-wjhg Wasmtime out of bounds read/write with zero-memory-pages configuration |
High EPSS 0.66% |
>= 0.0.0-0, < 1.0.2>= 2.0.0, < 2.0.2 | 1.0.22.0.2 |
| GHSA-44mr-8vmm-wjhg Wasmtime out of bounds read/write with zero-memory-pages configuration |
High EPSS 0.66% |
>= 0.0.0-0, < 1.0.2>= 2.0.0, < 2.0.2 | 1.0.22.0.2 |
| GHSA-44mr-8vmm-wjhg Wasmtime out of bounds read/write with zero-memory-pages configuration |
High EPSS 0.66% |
>= 2.0.0, < 2.0.2 | 2.0.2 |
| GHSA-44mr-8vmm-wjhg Wasmtime out of bounds read/write with zero-memory-pages configuration |
High EPSS 0.66% |
< 1.0.2 | 1.0.2 |
| GHSA-wh6w-3828-g9qf Wasmtime may have data leakage between instances in the pooling allocator |
High EPSS 0.75% |
>= 0.0.0-0, < 1.0.2>= 2.0.0, < 2.0.2 | 1.0.22.0.2 |
| GHSA-wh6w-3828-g9qf Wasmtime may have data leakage between instances in the pooling allocator |
High EPSS 0.75% |
>= 0.0.0-0, < 1.0.2>= 2.0.0, < 2.0.2 | 1.0.22.0.2 |
| GHSA-5fhj-g3p3-pq9g Wasmtime vulnerable to Use After Free with `externref`s |
High EPSS 1.25% |
>= 0.0.0-0, < 0.38.2 | 0.38.2 |
| GHSA-5fhj-g3p3-pq9g Wasmtime vulnerable to Use After Free with `externref`s |
High EPSS 1.25% |
>= 0.37.0, < 0.38.2 | 0.38.2 |
| GHSA-jqwc-c49r-4w2x Miscompilation of `i8x16.swizzle` and `select` with v128 inputs |
Medium EPSS 1.79% |
< 0.38.1 | 0.38.1 |
| GHSA-jqwc-c49r-4w2x Miscompilation of `i8x16.swizzle` and `select` with v128 inputs |
Medium EPSS 1.79% |
>= 0.0.0-0, < 0.38.1 | 0.38.1 |
| GHSA-gwc9-348x-qwv2 Use after free in Wasmtime |
Critical EPSS 1.18% |
< 0.34.2 | 0.34.2 |
| GHSA-gwc9-348x-qwv2 Use after free in Wasmtime |
Critical EPSS 1.18% |
>= 0.35.0, < 0.35.2 | 0.35.2 |
| GHSA-gwc9-348x-qwv2 Use after free in Wasmtime |
Critical EPSS 1.18% |
>= 0.34.0, < 0.34.2>= 0.35.0, < 0.35.2 | 0.34.20.35.2 |
| GHSA-gwc9-348x-qwv2 Use after free in Wasmtime |
Critical EPSS 1.18% |
>= 0.0.0-0, < 0.34.2>= 0.35.0, < 0.35.2 | 0.34.20.35.2 |
| GHSA-7f6x-jwh5-m9r4 Cranelift vulnerable to miscompilation of constant values in division on AArch64 |
High EPSS 0.92% |
>= 0.34.0, < 0.34.1 | 0.34.1 |
| GHSA-7f6x-jwh5-m9r4 Cranelift vulnerable to miscompilation of constant values in division on AArch64 |
High EPSS 0.92% |
< 0.38.2 | 0.38.2 |
| GHSA-7f6x-jwh5-m9r4 Cranelift vulnerable to miscompilation of constant values in division on AArch64 |
High EPSS 0.92% |
< 0.33.1 | 0.33.1 |
| GHSA-7f6x-jwh5-m9r4 Cranelift vulnerable to miscompilation of constant values in division on AArch64 |
High EPSS 0.92% |
>= 0.0.0-0, < 0.33.1>= 0.34.0, < 0.34.1 | 0.33.10.34.1 |
| GHSA-7f6x-jwh5-m9r4 Cranelift vulnerable to miscompilation of constant values in division on AArch64 |
High EPSS 0.92% |
>= 0.0.0-0, < 0.38.2 | 0.38.2 |
| GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime |
Medium EPSS 0.36% |
< 0.30.0 | 0.30.0 |
| GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime |
Medium EPSS 0.36% |
>= 0.0.0-0, < 0.30.0 | 0.30.0 |
| GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime |
Medium EPSS 0.36% |
>= 0.26.0, < 0.30.0 | 0.30.0 |
| GHSA-4873-36h9-wv49 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime |
Medium EPSS 0.36% |
< 0.30.0 | 0.30.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor