Skip to content
OpenAdvisories

Package · crates.io

wasmer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.9
    CVE-2024-38358

    Symlink bypasses filesystem sandbox in wasmer

    Wasmer is a web assembly (wasm) Runtime supporting WASIX, WASI and Emscripten. If the preopened directory has a symlink pointing outside, WASI programs can traverse the symlink and access host filesystem if the caller sets both `oflags::creat` and `rights::fd…

    wasmerio wasmer zellij zellij-bash-completion Wolfi crates.io