Skip to content
OpenAdvisories

Package · Wolfi

yara-x

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2026-34987

    Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access

    Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backend may allow properly constructed guest Wasm to access host memory outside of its linear-memory sandbox. This…

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian Ubuntu Wolfi crates.io
  • Critical 9.0
    CVE-2026-34971

    Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

    Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Cranelift compilation backend contains a bug on aarch64 when performing a certain shape of heap accesses which means that the wrong address is accessed. When c…

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian Ubuntu Wolfi crates.io