RUSTSEC-2026-0360None▾ SunlitOverlapping string transcode in a fused adapter can panic
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-54p9-vhhq-8f7q For more information see the GitHub-hosted security advisory.
wasmtime >= 49.0.0, < 49.0.3Upgrade to a patched release:
wasmtime 49.0.3Connected by shared product, vendor, weakness, or advisory.
RUSTSEC-2026-0363Medium· 6.2Component-model handle tables are capped only per instance and charged to no limit
RUSTSEC-2026-0364NoneException tags can cause host data structures to be unaligned
RUSTSEC-2026-0361NonePanic when pending calls are run after a trap
RUSTSEC-2026-0362NoneWasmtime may not properly enforce async-entrypoint requirement
RUSTSEC-2026-0358NoneYielding in a component start function can lead to a host panic
RUSTSEC-2026-0359Medium· 5.3Stack overflow dropping a long chain of recursive types