Lucene search
K

6 matches found

RustSec
RustSec
added 2026/05/21 12:0 p.m.10 views

WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-2r75-cxrj-cmph For more information see the GitHub-hosted security advisory...

5.8AI score
Exploits0Affected Software1
OSV
OSV
added 2026/02/24 12:0 p.m.3 views

RUSTSEC-2026-0020 Guest-controlled resource exhaustion in WASI implementations

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-852m-cvvp-9p4w For more information see the GitHub-hosted security advisory...

6.9CVSS5.4AI score0.00093EPSS
Exploits0References3
RustSec
RustSec
added 2026/02/24 12:0 p.m.6 views

Guest-controlled resource exhaustion in WASI implementations

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-852m-cvvp-9p4w For more information see the GitHub-hosted security advisory...

6.9CVSS5.3AI score0.00093EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.6 views

wasmtime 安全漏洞

Wasmtime is a lightweight WebAssembly runtime open source by the Bytecode Alliance. Versions of Wastime prior to 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0 contain security vulnerabilities. These vulnerabilities stem from the lack of proper restrictions on resource allocation for guest machine...

6.9CVSS5.8AI score0.00093EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.5 views

wasmtime 安全漏洞

Wasmtime is a lightweight WebAssembly runtime open source by the Bytecode Alliance. Versions of Wastime prior to 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0 contain security vulnerabilities. These vulnerabilities stem from the wasi:http/types Fields resource implementation, where excessive header...

7.5CVSS5.8AI score0.00032EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/09/15 12:0 a.m.4 views

Wasmtime Security Breach

Wasmtime is a bytecode consortium project that is a standalone wasm-optimized runtime for WebAssembly and WASI only. A security vulnerability exists in Wasmtime. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor announcement...

5.3CVSS6.5AI score0.00201EPSS
Exploits0References7
Rows per page
Query Builder