wasmtime-wasi (crates.io)
Advisories
24
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 50.0.1 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p wasmtime-wasi --precise 50.0.1Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| RUSTSEC-2026-0420 wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving |
Medium | >= 48.0.0, < 48.0.8>= 49.0.0, < 49.0.5>= 50.0.0, < 50.0.1 | 48.0.849.0.550.0.1 |
| RUSTSEC-2026-0352 Filesystem sandbox escape when renaming symlinks with trailing slashes |
Not rated yet EPSS 0.24% |
>= 0.0.0-0, < 36.0.18>= 37.0.0, < 48.0.6>= 49.0.0, < 49.0.3 | 36.0.1848.0.649.0.3 |
| RUSTSEC-2026-0321 WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption |
Medium EPSS 0.12% |
>= 0.0.0-0, < 36.0.17>= 37.0.0, < 48.0.4>= 49.0.0, < 49.0.2 | 36.0.1748.0.449.0.2 |
| RUSTSEC-2026-0324 Guest can panic host through filesystem timestamp before the epoch on wasip3 |
Medium EPSS 0.11% |
>= 46.0.0, < 48.0.4>= 49.0.0, < 49.0.2 | 48.0.449.0.2 |
| RUSTSEC-2026-0322 Excessive allocated memory on the host when guests don't have stdio |
Medium EPSS 0.21% |
>= 0.0.0-0, < 36.0.17>= 37.0.0, < 48.0.4>= 49.0.0, < 49.0.2 | 36.0.1748.0.449.0.2 |
| RUSTSEC-2026-0323 fd_readdir copies uninitialized struct padding into guest memory |
Low EPSS 0.20% |
>= 0.0.0-0, < 36.0.17>= 37.0.0, < 48.0.4>= 49.0.0, < 49.0.2 | 36.0.1748.0.449.0.2 |
| RUSTSEC-2026-0314 Guest can panic host through filesystem datetime overflow |
Medium EPSS 0.11% |
>= 0.0.0-0, < 36.0.16>= 37.0.0, < 48.0.3>= 49.0.0, < 49.0.1 | 36.0.1648.0.349.0.1 |
| GHSA-4ch3-9j33-3pmj Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination |
Medium EPSS 0.17% |
>= 46.0.0, < 46.0.1 | 46.0.1 |
| GHSA-4ch3-9j33-3pmj Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination |
Medium EPSS 0.17% |
< 24.0.11 | 24.0.11 |
| GHSA-4ch3-9j33-3pmj Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination |
Medium EPSS 0.17% |
>= 25.0.0, < 36.0.12 | 36.0.12 |
| GHSA-4ch3-9j33-3pmj Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination |
Medium EPSS 0.17% |
>= 0.0.0-0, < 24.0.11>= 25.0.0, < 36.0.12>= 37.0.0, < 45.0.3>= 46.0.0, < 46.0.1 | 24.0.1136.0.1245.0.346.0.1 |
| GHSA-4ch3-9j33-3pmj Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination |
Medium EPSS 0.17% |
>= 37.0.0, < 45.0.3 | 45.0.3 |
| GHSA-3p27-qvp9-27qf Wasmtime has a leak in WASIp1 `fd_renumber` implementation |
Medium EPSS 0.37% |
>= 25.0.0, < 36.0.11 | 36.0.11 |
| GHSA-3p27-qvp9-27qf Wasmtime has a leak in WASIp1 `fd_renumber` implementation |
Medium EPSS 0.37% |
>= 0.0.0-0, < 24.0.10>= 25.0.0, < 36.0.11>= 37.0.0, < 44.0.3>= 45.0.0, < 45.0.2 | 24.0.1036.0.1144.0.345.0.2 |
| GHSA-3p27-qvp9-27qf Wasmtime has a leak in WASIp1 `fd_renumber` implementation |
Medium EPSS 0.37% |
< 24.0.10 | 24.0.10 |
| GHSA-3p27-qvp9-27qf Wasmtime has a leak in WASIp1 `fd_renumber` implementation |
Medium EPSS 0.37% |
>= 45.0.0, < 45.0.2 | 45.0.2 |
| GHSA-3p27-qvp9-27qf Wasmtime has a leak in WASIp1 `fd_renumber` implementation |
Medium EPSS 0.37% |
>= 37.0.0, < 44.0.3 | 44.0.3 |
| RUSTSEC-2026-0149 wasmtime-wasi: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction |
High EPSS 0.36% |
< 24.0.9 | 24.0.9 |
| RUSTSEC-2026-0149 wasmtime-wasi: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction |
High EPSS 0.36% |
>= 37.0.0, < 44.0.2 | 44.0.2 |
| RUSTSEC-2026-0149 wasmtime-wasi: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction |
High EPSS 0.36% |
>= 25.0.0, < 36.0.10 | 36.0.10 |
| RUSTSEC-2026-0149 wasmtime-wasi: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction |
High EPSS 0.36% |
>= 0.0.0-0, < 24.0.9>= 25.0.0, < 36.0.10>= 37.0.0, < 44.0.2>= 45.0.0, < 45.0.0 | 24.0.936.0.1044.0.245.0.0 |
| GHSA-fm79-3f68-h2fc Wasmtime CLI is vulnerable to host panic through its fd_renumber function |
Low EPSS 0.38% |
< 24.0.4 | 24.0.4 |
| GHSA-fm79-3f68-h2fc Wasmtime CLI is vulnerable to host panic through its fd_renumber function |
Low EPSS 0.38% |
>= 34.0.0, < 34.0.2 | 34.0.2 |
| GHSA-fm79-3f68-h2fc Wasmtime CLI is vulnerable to host panic through its fd_renumber function |
Low EPSS 0.38% |
>= 25.0.0, < 33.0.2 | 33.0.2 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor