CVE-2026-119139

Wasmtime versions 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 are vulnerable to a host crash due to a leftover assertion in component::Func::call. This assertion incorrectly rejects guest exports that utilize the async ABI option. An attacker providing a component with an async-lifted export ca...