Vulnerability GHSA-xjhv-v822-pf94: Information
Description
Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future
Severity: (6.9)
Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| wasmtime | sisyphus | 43.0.0-alt1 | 43.0.0-alt1 | ALT-PU-2026-5689-2 | 414049 | Fixed |
| wasmtime | sisyphus_riscv64 | 43.0.0-alt1 | 43.0.0-alt1 | ALT-PU-2026-7613-1 | - | Fixed |
| wasmtime | sisyphus_loongarch64 | 43.0.0-alt1 | 43.0.0-alt1 | ALT-PU-2026-7551-1 | - | Fixed |
Affected packages
Ecosystem | Name | Affected versions | Patched versions |
|---|---|---|---|
| crates.io | wasmtime | >=39.0.0, <40.0.4 >=41.0.0, <41.0.4 | 40.0.4 41.0.4 |