CVE-2026-34983 vulnerabilities

Vulnerabilities for packages: wasmcloud...

CVE-2026-34983

A flaw was found in Wasmtime, a runtime for WebAssembly. This vulnerability allows for a use-after-free condition when a host application incorrectly clones and then drops a wasmtime::Linker instance before its cloned counterpart is used. This can lead to unpredictable program behavior and...

amaranth-yosys (0.40.0.0.post100), coreblocks (>=0.2026.7.3, <=0.2026.10.11) +4 more potentially affected by CVE-2026-34983 via wasmtime (25.0.0)

wasmtime PYPI version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.40.0.0.post100 - coreblocks =0.2026.7.3, =0.1.0, =0.5.0rc1, =0.5.1rc0 - yowasp-runtime 1.65.0 Source cves: CVE-2026-34983 Sour...

wasm-cli-runner (>=0.0.1, <=1.0.0) potentially affected by CVE-2026-34983 via wasmtime (3.0.0)

wasmtime PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - wasm-cli-runner =0.0.1, =1.0.0 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-151...

itkwasm (1.0.0b140) potentially affected by CVE-2026-34983 via wasmtime (13.0.0)

wasmtime PYPI version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - itkwasm 1.0.0b140 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-151...

amaranth-yosys (0.25.0.0.post72), devcycle-python-server-sdk (>=3.0.0, <=3.6.0) +10 more potentially affected by CVE-2026-34983 via wasmtime (9.0.0)

wasmtime PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post72 - devcycle-python-server-sdk =3.0.0, =0.1.0b7, =0.1.0a15, =0.1.0a15, =0.1.0a1, =0.1.0a19, =0.1.0a34, =0.1.0a1,...

amaranth-yosys (>=0.25.0.0.post75, <=0.25.0.0.post76), astyle-py (>=1.0.0, <=1.0.5) +7 more potentially affected by CVE-2026-34983 via wasmtime (12.0.0)

wasmtime PYPI version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.25.0.0.post75, =1.0.0, =0.1.6a1, =1.0.0b141, =0.0.0, =0.3.7a5, =0.1.0, =1.32.0, =0.1.4, =0.5.3 Source cves: CVE-2026-34983...

Linux Distros Unpatched Vulnerability : CVE-2026-34983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by...