Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cargo wasmtime Security Advisories

Loading...
High
GSA_kwCzR0hTQS13aDZ3LTM4MjgtZzlxZs4AAv0W
Wasmtime may have data leakage between instances in the pooling allocator
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: 7 months ago
Moderate
GSA_kwCzR0hTQS03ZjZ4LWp3aDUtbTlyNM4AAtkN
Cranelift vulnerable to miscompilation of constant values in division on AArch64
Ecosystems: cargo
Packages: cranelift-codegen, wasmtime
Source: GitHub Advisory Database
Published: 11 months ago
Moderate
GSA_kwCzR0hTQS1qcXdjLWM0OXItNHcyeM4AAtBw
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
Ecosystems: cargo
Packages: cranelift-codegen, wasmtime
Source: GitHub Advisory Database
Published: 11 months ago
Moderate
GSA_kwCzR0hTQS1xODc5LTlnOTUtNTZteM0V3Q
Wrong type for `Linker`-define functions when used across two `Engine`s
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00ODczLTM2aDktd3Y0Oc0V3A
Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS12NGNwLWg5NHItbTd4Zs0V2w
Use after free passing `externref`s to Wasm in Wasmtime
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS01ZmhqLWczcDMtcHE5Z84AAtg8
Wasmtime vulnerable to Use After Free with `externref`s
Ecosystems: cargo
Packages: cranelift-codegen, wasmtime
Source: GitHub Advisory Database
Published: 11 months ago
Low
GSA_kwCzR0hTQS1jaDg5LTVnNDUtcXdjN84AAy_z
Undefined Behavior in Rust runtime functions
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: about 1 month ago
High
GSA_kwCzR0hTQS1nd2M5LTM0OHgtcXd2Ms03ng
Use after free in Wasmtime
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS04OHhxLXc4Y3EteGZnN80sbg
Invalid drop of partially-initialized instances in the pooling instance allocator for modules with defined `externref` globals
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: over 1 year ago
Critical
GSA_kwCzR0hTQS1mZjRwLTd4cnEtcTVyOM4AAyAY
wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64
Ecosystems: cargo
Packages: cranelift-codegen, wasmtime
Source: GitHub Advisory Database
Published: 3 months ago
Low
GSA_kwCzR0hTQS14bTY3LTU4N3EtcjJ2d84AAyAX
wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64
Ecosystems: cargo
Packages: cranelift-codegen, wasmtime
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS00NG1yLTh2bW0td2poZ84AAv0V
Wasmtime out of bounds read/write with zero-memory-pages configuration
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: 7 months ago
Filter by Severity
Moderate 5,145 High 4,556 Critical 2,099 Low 676
Filter by Ecosystem
maven 3,859 npm 3,126 pypi 2,605 packagist 1,696 go 1,243 nuget 939 rubygems 711 cargo 640 hex 21 actions 10 pub 5
Filter by Package
openssl-src 26 rusqlite 16 wasmtime 13 ckb 12 deno 8 hyper 7 Simple-Wayland-HotKey-Daemon 6 cranelift-codegen 6 libpulse-binding 6 smallvec 6 sized-chunks 6 messagepack-rs 5 xcb 5 comrak 5 frontier 5 openssl 5 lock_api 5 bottlerocket/update-operator 5 raw-cpuid 4 tremor-script 4 tokio 4 actix-web 4 flatbuffers 3 pleaser 3 apache-avro 3 http 3 crossbeam-channel 3 nanorand 3 ammonia 3 crossbeam 3 deno_runtime 3 arrow 3 solana_rbpf 3 acc_reader 3 tauri 3 tough 3 cargo 3 slice-deque 3 streebog 3 arr 3 fltk 3 id-map 3 cgc 3 generator 3 opcua 2 hyper-staticfile 2 rand_core 2 spin 2 bumpalo 2 slock 2 axum-core 2 tower-http 2 traitobject 2 routinator 2 oqs 2 sha2 2 simple_asn1 2 zeroize_derive 2 pnet 2 array-macro 2 vec-const 2 tectonic_xdv 2 libp2p-core 2 rust-embed 2 metrics-util 2 ash 2 crypto2 2 derive-com-impl 2 futures-util 2 lru 2 futures-task 2 gfx-auxil 2 bronzedb-protocol 2 columnar 2 bite 2 binjs_io 2 image 2 abomonation 2 internment 2 socket2 2 nalgebra 2 async-h1 2 sodiumoxide 2 cache 2 model 2 failure 2 unicycle 2 slack-morphism 2 csv-sniffer 2 tar 2 lettre 2 buffoon 2 ozone 2 mopa 2 rdiff 2 molecule 2 coreos-installer 2 flumedb 2 evm 2 actix-http 2 toodee 2 nix 2 trust-dns-server 2 ncurses 2 rocket 2 ordnung 2 simple-slab 2 reorder 2 arenavec 2 noise_search 2 libsecp256k1 2 v9 2 ruspiro-singleton 2 multiqueue 2 parc 2 rcu_cell 2 scottqueue 2 syncpool 2 toolshed 2 tiny_future 2 ticketed_lock 2 signal-simple 2 abi_stable 2 stack_dst 2 rulex 2 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.linux-arm 1 Microsoft.NETCore.App.Runtime.Mono.linux-arm64 1 Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 1 Microsoft.NETCore.App.Runtime.Mono.linux-x64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.osx-arm64 1 Microsoft.NETCore.App.Runtime.Mono.osx-x64 1 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 1 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.win-x64 1 Microsoft.NETCore.App.Runtime.Mono.win-x86 1 Microsoft.NETCore.App.Runtime.linux-arm 1 Microsoft.NETCore.App.Runtime.linux-arm64 1 Microsoft.NETCore.App.Runtime.linux-musl-arm 1 parse_duration 1 out-reference 1 Microsoft.NETCore.App.Runtime.linux-x64 1 Microsoft.NETCore.App.Runtime.osx-arm64 1 Microsoft.NETCore.App.Runtime.osx-x64 1 Microsoft.NETCore.App.Runtime.win-arm 1 Microsoft.NETCore.App.Runtime.win-arm64 1 Microsoft.NETCore.App.Runtime.linux-musl-x64 1 Microsoft.NETCore.App.Runtime.win-x86 1 cryptography 1 juniper 1 Microsoft.NETCore.App.Runtime.win-x64 1 owning_ref 1 async-graphql 1 prettytable-rs 1 enum-map 1 Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 1 abox 1 mdBook 1 truetype 1 buttplug 1 autorand 1 try-mutex 1 magnetic 1 multihash 1 xml-rs 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.linux-musl-arm64 1 sequoia-openpgp 1 linked-hash-map 1 buffered-reader 1 capnp 1 bat 1 sccache 1 russh 1 ntpd 1 actix-service 1 h2 1 ntru 1 rmp-serde 1 rkyv 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm64 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 1 afire 1 aliyun-oss-client 1 im 1 miow 1 uu_od 1 iced-x86 1 ripgrep 1 grep-cli 1 bam 1 diesel 1 scratchpad 1 mongodb 1 stb_image 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm 1 vm-memory 1 libsecp256k1-rs 1 max7301 1 algorithmica 1 git-delta 1 bunch 1 telemetry 1 stackvector 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 1 heapless 1 array-queue 1 webbrowser 1 serde_yaml 1 byte_struct 1 bra 1 beef 1 convec 1 alg_ds 1 rmpv 1 libsbc 1 async-coap 1 libp2p-deflate 1 conqueue 1 Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.browser-wasm 1 Microsoft.NETCore.App.Runtime.Mono.android-x86 1 chunky 1 Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 1 array-tools 1 Microsoft.NETCore.App.Runtime.Mono.android-x64 1 Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 1 lucet-runtime 1 better-macro 1 sys-info 1 cortex-m-rt 1 fake-static 1 yottadb 1 base64 1 disrustor 1 outer_cgi 1 evm-core 1 insert_many 1 adtensor 1 Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 1 arc-swap 1 nano_arena 1 quinn 1 nb-connect 1 postscript 1 ms3d 1 marc 1 calamine 1 containers 1 glsl-layout 1 lazy-init 1 av-data 1 fil-ocl 1 basic_dsp_matrix 1 Microsoft.NETCore.App.Runtime.Mono.android-arm64 1 multiqueue2 1 eventio 1 may_queue 1 hashconsing 1 rusb 1 conquer-once 1 late-static 1