CVE-2026-126406

The wasmtime-wasi-http p2 implementation in Wasmtime is vulnerable to HTTP Request Smuggling . Affected versions include prior to 36.0.20 , 37.0.0 before 48.0.8 , 49.0.0 before 49.0.5 , and 50.0.0 before 50.0.1 . The root cause is the ability of the component to send outgoing requests with confli...