Skip to content
OpenAdvisories

Package · Wolfi

wash

27 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-34987

    Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access

    Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backend may allow properly constructed guest Wasm to access host memory outside of its linear-memory sandbox. This…

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian Ubuntu Wolfi crates.io