Skip to content
OpenAdvisories

Vendor

wasmerio

2 known vulnerabilities.

Products

wasmer 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.9
    CVE-2024-38358

    Symlink bypasses filesystem sandbox in wasmer

    Wasmer is a web assembly (wasm) Runtime supporting WASIX, WASI and Emscripten. If the preopened directory has a symlink pointing outside, WASI programs can traverse the symlink and access host filesystem if the caller sets both `oflags::creat` and `rights::fd…

    wasmerio wasmer zellij zellij-bash-completion Wolfi crates.io