tocsin

crates.io/wasmtime CVE-2025-53901: low 3.3, EPSS 0.38%

Host panic with `fd_renumber` WASIp1 function

Action: Upgrade wasmtime to 24.0.4 or later.

cargo update -p wasmtime --precise 24.0.4
cargo update -p wasmtime --precise 33.0.2
cargo update -p wasmtime --precise 34.0.2

Affected

introducedfixedlast affected
10.0.024.0.4-
25.0.033.0.2-
34.0.034.0.2-

Fixed versions

24.0.433.0.234.0.2

Sources

CVE-2025-53901 · published · modified · JSON