| Package | Affected versions | Patched versions |
|---|---|---|
| wasmtime | ≥ 38.0.0, < 38.0.3 | 38.0.3 |
Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a segfault or assert failure. Wasmtime 38.0.3 has been released and is patched to fix this issue. There are no workarounds.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free