Bytecode Alliance wasmtime improper exception handling vulnerability

A security vulnerability exists in Bytecode Alliance Wasmtime versions prior to 46.0.0 and between 48.0.7 and 49.0.4, as well as versions between 49.0.0 and 49.0.4. This vulnerability arises when a host creates a component model stream or future downgrades it to a guest. After values are processe...

Vulnerability related to the software supply chain issue in Bytecode Alliance wasmtime

In versions prior to Bytecode Alliance Wasmtime 48.0.4, versions 47.0.0 and versions prior to 49.0.2, versions 49.0.0 contain a software supply chain vulnerability. This vulnerability stems from improper validation of WebAssembly tag subtype imports for core modules. Malicious actors can...