https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:31:59.584886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-34983 CVE-2026-34983 — Wasmtime has a use-after-free bug after cloning `wasmtime::Linker` 2026-10-10T19:31:59.646595+00:00

Affected: bytecodealliance wasmtime

Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be triggered by a specific sequence of embedder API calls made by the host. Specifically, the following steps must occur to trigger the bug clone a wasmtime::Linker, drop the original linker instance, use the new, cloned linker instance, resulting in a use-after-free. This vulnerability is fixed in 43.0.1.

 https://cve.radiocsirt.org/vuln/pysec-2026-151 PYSEC-2026-151 2026-10-10T19:31:59.646659+00:00

Affected: PyPI: wasmtime

Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be triggered by a specific sequence of embedder API calls made by the host. Specifically, the following steps must occur to trigger the bug clone a wasmtime::Linker, drop the original linker instance, use the new, cloned linker instance, resulting in a use-after-free. This vulnerability is fixed in 43.0.1.

 https://cve.radiocsirt.org/vuln/rustsec-2026-0090 RUSTSEC-2026-0090 — Use-after-free bug after cloning `wasmtime::Linker` 2026-10-10T19:31:59.646685+00:00

Affected: crates.io: wasmtime

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hfr4-7c6c-48w2 For more information see the GitHub-hosted security advisory.