CVE-2026-115382

A flaw was found in Wasmtime. A guest WebAssembly application can trigger a Denial of Service DoS by specifying a zero timeout value in an HTTP request option. Because the runtime fails to validate this configuration before passing it to an underlying system library, an internal panic occurs that...