crates.io/wasmtime CVE-2026-27195: high 7.5, EPSS 0.41%
Panic when dropping a `[Typed]Func::call_async` future
Action: Upgrade wasmtime to 40.0.4 or later.
cargo update -p wasmtime --precise 40.0.4cargo update -p wasmtime --precise 41.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 39.0.0 | 40.0.4 | - |
| 41.0.0 | 41.0.4 | - |
Fixed versions
| 40.0.4 | 41.0.4 |
Sources
- osv: RUSTSEC-2026-0022
- nvd: CVE-2026-27195
- https://crates.io/crates/wasmtime
- https://rustsec.org/advisories/RUSTSEC-2026-0022.html
- https://github.com/bytecodealliance/wasmtime/commit/9e51c0d9a240a9613d279c061f82286bd11383fd
CVE-2026-27195 · published · modified · JSON