Vendor
Wasmtime
Products
1
CVEs
2
Across products
2
Status
Private
Products
1- 2 CVEs
Recent CVEs
2| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-58494 | mod | 0.42 | 6.5 | — | Jul 8, 2026 | wasmtime: Wasmtime: Overwrite host files via insufficient permission checks in wasmtime-wasi | ||
| CVE-2026-54786 | 0.00 | — | 0.00 | Jul 3, 2026 | Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those before 44.0.3; and versions 45.0.0 and 45.0.1 contain a native implementation of WASIp1 which suffers from a leak in the fd_renumber… |
- risk 0.42cvss 6.5epss —
wasmtime: Wasmtime: Overwrite host files via insufficient permission checks in wasmtime-wasi
- CVE-2026-54786Jul 3, 2026risk 0.00cvss —epss 0.00
Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those before 44.0.3; and versions 45.0.0 and 45.0.1 contain a native implementation of WASIp1 which suffers from a leak in the fd_renumber…