EUVD-2026-108316

Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in wasmtime-wasi that allows guest WASI programs to panic the host via overflowing filesystem timestamps. Attackers can pass atim or mtim values whose sub-second field overflows the...

CVE-2026-115387

The Wasmtime runtime is vulnerable to a denial of service vulnerability in wasmtime-wasi affecting versions before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1. The root cause is an integer overflow (CWE-190) where guest WASI programs can pass atim or mtim values with a sub-second fiel...