Skip to content
OpenAdvisories

Package · Wolfi

cleave

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-115905 Public exploit

    zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

    zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader extracts using Local File Header filenames without reconciling th…

    zip-rs zip2 rust pixi Debian Ubuntu Azure Linux Wolfi crates.io
  • Critical 9.9
    CVE-2026-115893 Public exploit

    Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

    Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditional branch target. …

    bytecodealliance wasmtime rust wasmtime Debian Ubuntu Azure Linux Wolfi crates.io