PkgSeer

Vulnerability RUSTSEC-2026-0423

Unknown

1 day ago

Cross-engine type confusion with host-created struct-types-with-supertypes

47.0.0 - 48.0.7 and 49.0.0 - 49.0.4 and 50.0.0

Summary

Cross-engine type confusion with host-created struct-types-with-supertypes

Details

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qw58-7h65-crq2 For more information see the GitHub-hosted security advisory.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-check

47.0.0 - 48.0.7 and 49.0.0 - 49.0.4 and 50.0.0 RUSTSEC-2026-0422

Unchecked memory usage in transferring borrowed resources between components

0.0.0 - 36.0.19 and 37.0.0 - 48.0.7 and 49.0.0 - 49.0.4 and 50.0.0 RUSTSEC-2026-0424

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

0.0.0 - 36.0.18 and 37.0.0 - 48.0.6 and 49.0.0 - 49.0.3 GHSA-mghf-wjfp-p5xm

Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type

46.0.0 - 48.0.6 and 49.0.0 - 49.0.3 GHSA-9pvw-hwfg-92h5

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

0.0.0 - 36.0.18 and 37.0.0 - 42.0.2 GHSA-897f-g5gm-fmxm

View all vulnerabilities for these packages

Impacted packages

wasmtime

Timeline

Published

1 day ago

Fixed (50.0.1)

1 day ago

Fixed (49.0.5)

1 day ago

Fixed (48.0.8)

1 day ago

Last Modified

17 hours ago