yowasp-runtime (1.49.0) potentially affected by CVE-2024-47813 via wasmtime (16.0.0)

wasmtime PYPI version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - yowasp-runtime 1.49.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.38.0.0.post87), typegraph (>=0.3.5, <=0.3.6) +1 more potentially affected by CVE-2024-47813 via wasmtime (18.0.2)

wasmtime PYPI version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.38.0.0.post87 - typegraph =0.3.5, =0.3.6 - yowasp-runtime 1.52.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-3...

CVE-2024-47813

Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a wasmtime::Engine's internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry corruption. That registry corruption...

amaranth-yosys (>=0.25.0.0.post79, <=0.37.0.59.post84), yowasp-runtime (>=1.45.0, <=1.48.0) potentially affected by CVE-2024-47813 via wasmtime (15.0.0)

wasmtime PYPI version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.25.0.0.post79, =1.45.0, =1.48.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (>=0.37.0.59.post85, <=0.38.0.0.post86), yowasp-runtime (1.50.0) potentially affected by CVE-2024-47813 via wasmtime (17.0.1)

wasmtime PYPI version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.37.0.59.post85, =0.38.0.0.post86 - yowasp-runtime 1.50.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.25.0.0.post77), one-sdk (>=1.0.0b8, <=1.0.0b14) +2 more potentially affected by CVE-2024-47813 via wasmtime (13.0.2)

wasmtime PYPI version 13.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post77 - one-sdk =1.0.0b8, =0.2.2, =0.3.4 - yowasp-runtime 1.40.0 Source cves: CVE-2024-47813 Source advisory:...

astyle-py (>=0.9.0, <=0.9.1) potentially affected by CVE-2024-47813 via wasmtime (0.40.0)

wasmtime PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - astyle-py =0.9.0, =0.9.1 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.40.0.0.post95), typegraph (>=0.4.2, <=0.4.10) +1 more potentially affected by CVE-2024-47813 via wasmtime (21.0.0)

wasmtime PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.40.0.0.post95 - typegraph =0.4.2, =0.4.10 - yowasp-runtime 1.59.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-...

amaranth-yosys (0.10.0.dev47), polywrap-client (>=0.1.0a2, <=0.1.0a14) +19 more potentially affected by CVE-2024-47813 via wasmtime (1.0.1)

wasmtime PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.10.0.dev47 - polywrap-client =0.1.0a2, =0.1.0a1, =0.1.0a2, =0.1.0a2, =0.4.0.post20.dev360, =0.4.0.post20.dev360,...

amaranth-yosys (0.25.0.0.post73), one-sdk (>=1.0.0b0, <=1.0.0b7) +2 more potentially affected by CVE-2024-47813 via wasmtime (10.0.1)

wasmtime PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.25.0.0.post73 - one-sdk =1.0.0b0, =0.2.0, =1.23.0, =1.25.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (>=0.25.0.0.post61, <=0.25.0.0.post67), yowasp-runtime (>=1.7.0, <=1.12.0) potentially affected by CVE-2024-47813 via wasmtime (5.0.0)

wasmtime PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.25.0.0.post61, =1.7.0, =1.12.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

memquery (0.1.1) potentially affected by CVE-2024-47813 via wasmtime (0.25.0)

wasmtime PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - memquery 0.1.1 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

amaranth-yosys (0.9.0.post3746.dev41), nmigen-yosys (>=0.9.0.post3746.dev34, <=0.9.0.post3746.dev38) +15 more potentially affected by CVE-2024-47813 via wasmtime (0.30.0)

wasmtime PYPI version 0.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.9.0.post3746.dev41 - nmigen-yosys =0.9.0.post3746.dev34, =0.0.0.post3849.dev224, =0.0.0.post3849.dev224, =0.0.0.post3849.dev22...

PYSEC-2024-311

Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a wasmtime::Engine's internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry corruption. That registry corruption...

nmigen-yosys (0.9.0.post3746.dev32), yowasp-nextpnr-ecp5 (>=0.0.0.post3645.dev165, <=0.0.0.post3645.dev167) +13 more potentially affected by CVE-2024-47813 via wasmtime (0.27.0)

wasmtime PYPI version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - nmigen-yosys 0.9.0.post3746.dev32 - yowasp-nextpnr-ecp5 =0.0.0.post3645.dev165, =0.0.0.post3645.dev165, =0.0.0.post3645.dev165,...

amaranth-yosys (>=0.25.0.0.post75, <=0.25.0.0.post76), astyle-py (>=1.0.0, <=1.0.5) +7 more potentially affected by CVE-2024-47813 via wasmtime (12.0.0)

wasmtime PYPI version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.25.0.0.post75, =1.0.0, =0.1.6a1, =1.0.0b141, =0.0.0, =0.3.7a5, =0.1.0, =1.32.0, =0.1.4, =0.5.3 Source cves: CVE-2024-47813...

amaranth-yosys (>=0.38.0.0.post88, <=0.40.0.0.post93), yowasp-runtime (1.53.0) potentially affected by CVE-2024-47813 via wasmtime (19.0.0)

wasmtime PYPI version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys =0.38.0.0.post88, =0.40.0.0.post93 - yowasp-runtime 1.53.0 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

PYSEC-2024-311

Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a wasmtime::Engine's internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry corruption. That registry corruption...

amaranth-yosys (0.10.0.dev44) potentially affected by CVE-2024-47813 via wasmtime (0.31.0)

wasmtime PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - amaranth-yosys 0.10.0.dev44 Source cves: CVE-2024-47813 Source advisory: OSV:PYSEC-2024-311...

CVE-2024-47763

Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The runtime crash may be undefined behavior if Wasmtime was compiled with Rust 1.80 or prior. The runtim...