| CVE-2026-121440 |
Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the…
|
6.3
Medium
|
Nov 3, 2026 |
| CVE-2026-121441 |
Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 contains a request smuggling vulnerability in…
|
6.3
Medium
|
Nov 3, 2026 |
| CVE-2026-121439 |
Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-http p3…
|
6.9
Medium
|
Nov 3, 2026 |
| CVE-2026-119142 |
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the…
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119143 |
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119141 |
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows…
|
6.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119140 |
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows…
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119139 |
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::call
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119138 |
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows pending…
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119137 |
Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a stack overflow vulnerability that allows guests to…
|
6.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119136 |
Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and…
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119134 |
Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 caps component-model resource handle tables only…
|
6.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119135 |
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatch
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119133 |
Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that…
|
2.1
Low
|
Oct 29, 2026 |
| CVE-2026-119132 |
Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger…
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119130 |
Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path-with-query…
|
2.1
Low
|
Oct 29, 2026 |
| CVE-2026-119131 |
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-http
|
6.9
Medium
|
Oct 29, 2026 |
| CVE-2026-118688 |
Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename
|
8.8
High
|
Oct 28, 2026 |
| CVE-2026-115893 |
Wasmtime is a runtime for WebAssembly
|
9.9
Critical
|
Oct 23, 2026 |
| CVE-2026-115892 |
Wasmtime is a runtime for WebAssembly
|
5.7
Medium
|
Oct 23, 2026 |
| CVE-2026-115889 |
Wasmtime is a runtime for WebAssembly
|
9.9
Critical
|
Oct 23, 2026 |
| CVE-2026-115393 |
Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion…
|
1.0
Low
|
Oct 22, 2026 |
| CVE-2026-115392 |
Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem…
|
8.8
High
|
Oct 22, 2026 |
| CVE-2026-115391 |
Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams
|
6.9
Medium
|
Oct 22, 2026 |
| CVE-2026-115389 |
Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations…
|
1.0
Low
|
Oct 22, 2026 |