CVE-2024-47813

Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a wasmtime::Engine's internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry corruption. That registry corruption...

CVE-2024-47813 vulnerabilities

Vulnerabilities for packages: zed, wash, wizer, wasmcloud...

CVE-2024-47813 vulnerabilities

Vulnerabilities for packages: zed, wash, wasmcloud, wizer...

nmigen-yosys (>=0.9.0.post3527.dev29, <=0.9.0.post3746.dev31), yowasp-nextpnr-ecp5 (>=0.0.0.post2706.dev41, <=0.0.0.post3609.dev156) +12 more potentially affected by CVE-2024-47813 via wasmtime (0.21.0)

wasmtime PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - nmigen-yosys =0.9.0.post3527.dev29, =0.0.0.post2706.dev41, =0.0.0.post2706.dev41, =0.0.0.post2706.dev41, =0.0.0.post2706.dev41,...

amaranth-yosys (0.40.0.0.post94), typegraph (>=0.4.0, <=0.4.1) +1 more potentially affected by CVE-2024-47813 via wasmtime (20.0.0)

wasmtime PYPI version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.40.0.0.post94 - typegraph =0.4.0, =1.54.0, =1.57.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

memquery (0.1.1) potentially affected by CVE-2024-47813 via wasmtime (0.25.0)

wasmtime PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - memquery 0.1.1 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

nmigen-yosys (0.9.0.post3746.dev32), yowasp-nextpnr-ecp5 (>=0.0.0.post3645.dev165, <=0.0.0.post3645.dev167) +13 more potentially affected by CVE-2024-47813 via wasmtime (0.27.0)

wasmtime PYPI version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - nmigen-yosys 0.9.0.post3746.dev32 - yowasp-nextpnr-ecp5 =0.0.0.post3645.dev165, =0.0.0.post3645.dev165, =0.0.0.post3645.dev165,...

yowasp-nextpnr-ecp5 (>=0.0.0.post3694.dev181, <=0.0.0.post3816.dev218), yowasp-nextpnr-ecp5-25k (>=0.0.0.post3694.dev181, <=0.0.0.post3816.dev218) +13 more potentially affected by CVE-2024-47813 via wasmtime (0.28.1)

wasmtime PYPI version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - yowasp-nextpnr-ecp5 =0.0.0.post3694.dev181, =0.0.0.post3694.dev181, =0.0.0.post3694.dev181, =0.0.0.post3694.dev181, =0.0.0.post3694.dev181,...

amaranth-yosys (0.10.0.dev47), polywrap-client (>=0.1.0a2, <=0.1.0a14) +19 more potentially affected by CVE-2024-47813 via wasmtime (1.0.1)

wasmtime PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.10.0.dev47 - polywrap-client =0.1.0a2, =0.1.0a1, =0.1.0a2, =0.1.0a2, =0.4.0.post20.dev360, =0.4.0.post20.dev360,...

amaranth-yosys (0.25.0.0.post71), yowasp-runtime (>=1.20.0, <=1.21.0) potentially affected by CVE-2024-47813 via wasmtime (8.0.1)

wasmtime PYPI version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post71 - yowasp-runtime =1.20.0, =1.21.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

nmigen-yosys (0.9.0.post3527.dev27), yowasp-nextpnr-ecp5 (0.0.0.post2706.dev40) +12 more potentially affected by CVE-2024-47813 via wasmtime (0.20.0)

wasmtime PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - nmigen-yosys 0.9.0.post3527.dev27 - yowasp-nextpnr-ecp5 0.0.0.post2706.dev40 - yowasp-nextpnr-ecp5-25k 0.0.0.post2706.dev40 -...

CVE-2024-47813

Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a wasmtime::Engine's internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry corruption. That registry corruption...