PkgSeer

Vulnerabilities

Last updated 47 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
wasmtime-wasi-http Outgoing HTTP body write allows guest-driven host memory exhaustion Medium Risk 6.2 4 days ago 3 hours ago
wasmtime-wasi Guest can panic host through filesystem datetime overflow Medium Risk 6.2 4 days ago 3 hours ago
wasmtime `call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification Medium Risk 5.7 4 days ago 3 hours ago
wasmtime Dynamic record lifting can allocate beyond the hostcall fuel limit Unknown 4 days ago 3 hours ago
wasmtime-wasi wasmtime-wasi: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction High Risk 7.5 3 months ago 19 days ago
wasmtime wasmtime has a panic when allocating a table exceeding the size of the host's address space Medium Risk 6.0 4 months ago 19 days ago
wasmtime Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access Critical 9.5 5 months ago 19 days ago
wasmtime Wasmtime: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding High Risk 8.1 5 months ago 19 days ago
wasmtime Wasmtime has a possible panic when lifting `flags` component value High Risk 7.5 5 months ago 19 days ago
wasmtime Wasmtime has host data leakage with 64-bit tables and Winch Medium Risk 6.5 5 months ago 19 days ago
wasmtime Wasmtime has host panic when Winch compiler executes `table.fill` High Risk 7.5 5 months ago 19 days ago
wasmtime Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 Medium Risk 5.7 5 months ago 19 days ago
wasmtime Wasmtime has improperly masked return value from `table.grow` with Winch compiler backend Medium Risk 6.0 5 months ago 19 days ago
wasmtime Wasmtime has use-after-free bug after cloning `wasmtime::Linker` Low Risk 3.0 5 months ago 19 days ago
wasmtime Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 Medium Risk 6.0 8 months ago 19 days ago
wasmtime Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift High Risk 7.8 5 months ago 19 days ago
wasmtime Wasmtime: Panic when transcoding misaligned utf-16 strings Medium Risk 6.5 5 months ago 19 days ago
wasmtime Wasmtime has data leakage between pooling allocator instances Low Risk 3.0 5 months ago 19 days ago
wasmtime Wasmtime has out-of-bounds write or crash when transcoding component model strings Medium Risk 6.0 5 months ago 19 days ago
wasmtime Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future Medium Risk 6.0 7 months ago 19 days ago
wasmtime Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion Medium Risk 6.0 7 months ago 19 days ago
wasmtime Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance Medium Risk 6.0 7 months ago 19 days ago
wasmtime Wasmtime provides unsound API access to a WebAssembly shared linear memory Low Risk 1.8 10 months ago 19 days ago
wasmtime Wasmtime CLI is vulnerable to host panic through its fd_renumber function Low Risk 3.5 1 year ago 19 days ago
wasmtime-wasi Wasmtime CLI is vulnerable to host panic through its fd_renumber function Low Risk 3.5 1 year ago 19 days ago
wasmtime Wasmtime doesn't fully sandbox all the Windows device filenames Low Risk 3.0 1 year ago 19 days ago
wasmtime Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations Low Risk 2.9 1 year ago 19 days ago
wasmtime wasmtime has a runtime crash when combining tail calls with trapping imports Medium Risk 5.5 1 year ago 19 days ago
wasmtime Wasmtime vulnerable to panic when using a dropped extenref-typed element segment Low Risk 3.3 2 years ago 19 days ago
wasmtime wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64 Critical 9.9 3 years ago 19 days ago
wasmtime wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64 Low Risk 3.1 3 years ago 19 days ago
wasmtime Guest controlled-size host heap allocation through WASIp3 streams Unknown 1 month ago 29 days ago
wasmtime Filesystem sandbox escape when paths or symlinks contain trailing slashes Unknown 1 month ago 29 days ago
wasmtime-wasi Leak in WASIp1 `fd_renumber` implementation Unknown 3 months ago 1 month ago
wasmtime-wasi Wasmtime has a leak in WASIp1 `fd_renumber` implementation Medium Risk 5.0 1 month ago 1 month ago
wasmtime Stores can mix up type indices between engines Low Risk 3.8 1 month ago 1 month ago
wasmtime Preemption and traps during bulk operations enable breaking internal VM state Unknown 1 month ago 1 month ago
wasmtime-bin Wasmtime: Memory leak in C API with `externref` and `anyref` types Low Risk 3.3 2 months ago 2 months ago
wasmtime-c-api-impl Wasmtime: Memory leak in C API with `externref` and `anyref` types Low Risk 3.3 2 months ago 2 months ago
wasmtime-wasi WASI hard links and renames bypass wasmtime-wasi's FilePerms for destination Medium Risk 6.5 3 months ago 2 months ago
wasmtime No summary available Medium Risk 5.5 2 years ago 2 months ago
wasmtime Panic when using a dropped extenref-typed element segment Low Risk 3.3 2 years ago 2 months ago
wasmtime-bin No summary available Low Risk 3.3 11 months ago 2 months ago
wasmtime Memory access due to code generation flaw in Cranelift module High Risk 7.2 5 years ago 2 months ago
wasmtime Wrong type for `Linker`-define functions when used across two `Engine`s Medium Risk 6.3 5 years ago 2 months ago
wasmtime Wrong type for `Linker`-define functions when used across two `Engine`s Medium Risk 6.3 5 years ago 2 months ago
wasmtime Use after free passing `externref`s to Wasm in Wasmtime Medium Risk 6.3 5 years ago 2 months ago
wasmtime Use after free passing `externref`s to Wasm in Wasmtime Medium Risk 6.3 5 years ago 2 months ago
wasmtime Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 Low Risk 2.2 3 years ago 2 months ago
wasmtime Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime Medium Risk 6.3 5 years ago 2 months ago
Data courtesy of OSV.dev
Page 1