RUSTSEC-2026-0020: Guest-controlled resource exhaustion in WASI implementations #220
Description
| Details | |
|---|---|
| Package | wasmtime |
| Version | 41.0.1 |
| URL | GHSA-852m-cvvp-9p4w |
| Patched Versions | >=24.0.6, <25.0.0 OR >=36.0.6, <37.0.0 OR >=40.0.4, <41.0.0 OR >=41.0.4 |
| Aliases | CVE-2026-27204, GHSA-852m-cvvp-9p4w |
This is an entry in the RustSec database for the Wasmtime security advisory
located at
GHSA-852m-cvvp-9p4w
For more information see the GitHub-hosted security advisory.