CVE-2026-119136

The Wasmtime runtime (versions 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 ) contains insufficient checks in the Store component when mixing async-style and sync-style WebAssembly calls. This vulnerability allows embedders re-entering WebAssembly via sync APIs from host functions called asynchr...