Wasmtime RUSTSEC-2026-0378 DoS Vulnerability Advisory (GHSA-9pww-hwfg-52h5)

Vulnerability Overview Vulnerability ID: RUSTSEC-2026-0378 Published Date: October 19, 2026 Published Date: October 20, 2026 Package Name: wasmtime (crates.io) Type: Vulnerability Alias: GHSA-9pww-hwfg-52h5 CVSS Score: 5.7 (Medium) Attack Complexity: High Attack Requirements: None Attack Vector: Network Required Privileges: High Impact on Subsequent System Availability: None Impact on Subsequent System Confidentiality: None Impact on Subsequent System Integrity: None User Interaction: Required Impact on Vulnerable System Availability: High Impact on Vulnerable System Confidentiality: None Impact on Vulnerable System Integrity: None CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Scope of Impact Fixed Versions: >=48.0.3, >=49.0.0 Unaffected Versions: =48.0.3, >=49.0.0 Description This is an entry in the RustSec database regarding a Wasmtime security advisory, located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-9pww-hwfg-52h5. For more information, please refer to the GHSA-hosted security advisory. Reference Links https://github.com/bytecodealliance/wasmtime/pull/14827 Additional Information Advisory License: CC0-1.0 Vulnerability Details Attack Complexity: High Attack Requirements: None Attack Vector: Network Required Privileges: High Impact on Subsequent System Availability: None Impact on Subsequent System Confidentiality: None Impact on Subsequent System Integrity: None User Interaction: Required Impact on Vulnerable System Availability: High Impact on Vulnerable System Confidentiality: None Impact on Vulnerable System Integrity: None Vulnerability Overview Vulnerability ID: RUSTSEC-2026-0378 Published Date: October 19, 2026 Published Date: October 20, 2026 Package Name: wasmtime (crates.io) Type: Vulnerability Alias: GHSA-9pww-hwfg-52h5 CVSS Score: 5.7 (Medium) Attack Complexity: High Attack Requirements: None Attack Vector: Network Required Privileges: High Impact on Subsequent System Availability: None Impact on Subsequent System Confidentiality: None Impact on Subsequent System Integrity: None User Interaction: Required Impact on Vulnerable System Availability: High Impact on Vulnerable System Confidentiality: None Impact on Vulnerable System Integrity: None CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Scope of Impact Fixed Versions: >=48.0.3, >=49.0.0 Unaffected Versions: =48.0.3, >=49.0.0 Description This is an entry in the RustSec database regarding a Wasmtime security advisory, located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-9pww-hwfg-52h5. For more information, please refer to the GHSA-hosted security advisory. Reference Links https://github.com/bytecodealliance/wasmtime/pull/14827 Additional Information Advisory License: CC0-1.0 Vulnerability Details Attack Complexity: High Attack Requirements: None Attack Vector: Network Required Privileges: High Impact on Subsequent System Availability: None Impact on Subsequent System Confidentiality: None Impact on Subsequent System Integrity: None User Interaction: Required Impact on Vulnerable System Availability: High Impact on Vulnerable System Confidentiality: None Impact on Vulnerable System Integrity: None Vulnerability Overview Vulnerability ID: RUSTSEC-2026-0378 Published Date: October 19, 2026 Published Date: October 20, 2026 Package Name: wasmtime (crates.io) Type: Vulnerability Alias: GHSA-9pww-hwfg-52h5 CVSS Score: 5.7 (Medium) Attack Complexity: High Attack Requirements: None Attack Vector: Network Required Privileges: High Impact on Subsequent System Availability: None Impact on Subsequent System Confidentiality: None Impact on Subsequent System Integrity: None User Interaction: Required Impact on Vulnerable System Availability: High Impact on Vulnerable System Confidentiality: None Impact on Vulnerable System Integrity: None CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Scope of Impact Fixed Versions: >=48.0.3, >=49.0.0 Unaffected Versions: =48.0.3, >=49.0.0 Description This is an entry in the RustSec database regarding a Wasmtime security advisory, located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-9pww-hwfg-52h5. For more information, please refer to the GHSA-hosted security advisory. Reference Links https://github.com/bytecodealliance/wasmtime/pull/14827 Additional Information Advisory License: CC0-1.0 Vulnerability Details Attack Complexity: High Attack Requirements: None Attack Vector: Network Required Privileges: High Impact on Subsequent System Availability: None Impact on Subsequent System Confidentiality: None Impact on Subsequent System Integrity: None User Interaction: Required Impact on Vulnerable System Availability: High Impact on Vulnerable System Confidentiality: None Impact on Vulnerable System Integrity: None Vulnerability Overview Vulnerability ID: RUSTSEC-2026-0378 Published Date: October 19, 2026 Published Date: October 20, 2026 Package Name: wasmtime (crates.io) Type: Vulnerability Alias: GHSA-9p

Goal Reached Thanks to every supporter — we hit 100%!

Wasmtime RUSTSEC-2026-0378 DoS Vulnerability Advisory (GHSA-9pww-hwfg-52h5)

More from this source