Skip to content
OpenAdvisories

Package · PyPI

wasmtime

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 1.0
    CVE-2026-34983

    Wasmtime has a use-after-free bug after cloning `wasmtime::Linker`

    Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be triggered by a specific sequence of embedder API calls made by t…

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian Ubuntu Wolfi PyPI crates.io
  • Low 2.9
    CVE-2024-47813

    Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations

    Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry …

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian Ubuntu Wolfi PyPI crates.io
  • Low 3.3
    CVE-2024-30266

    Wasmtime vulnerable to panic when using a dropped extenref-typed element segment

    wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtim…

    bytecodealliance wasmtime wasmtime zed Debian Wolfi PyPI crates.io