wasmtime-wasi vulnerabilities
CVEs whose affected-version data names the wasmtime-wasi package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
11 CVEsRSS
CVE-2026-58494Medium· 6.5Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
RUSTSEC-2026-0352NoneFilesystem sandbox escape when renaming symlinks with trailing slashes
Filesystem sandbox escape when renaming symlinks with trailing slashes
CVE-2026-115386Low· 2.6fd_readdir copies uninitialized struct padding into guest memory
fd_readdir copies uninitialized struct padding into guest memory
RUSTSEC-2026-0324Medium· 6.2Guest can panic host through filesystem timestamp before the epoch on wasip3
Guest can panic host through filesystem timestamp before the epoch on wasip3
RUSTSEC-2026-0323Nonefd_readdir copies uninitialized struct padding into guest memory
fd_readdir copies uninitialized struct padding into guest memory
RUSTSEC-2026-0322NoneExcessive allocated memory on the host when guests don't have stdio
Excessive allocated memory on the host when guests don't have stdio
RUSTSEC-2026-0321Medium· 4.0WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption
WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption
CVE-2026-115387Medium· 6.2Guest can panic host through filesystem datetime overflow
Guest can panic host through filesystem datetime overflow
RUSTSEC-2026-0314Medium· 6.2Guest can panic host through filesystem datetime overflow
Guest can panic host through filesystem datetime overflow
CVE-2026-54786LowLeak in WASIp1 `fd_renumber` implementation
Leak in WASIp1 `fd_renumber` implementation
CVE-2026-47261High· 7.5⚖ disputedWASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction
WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction