tocsin

crates.io/wasmtime CVE-2026-34988: medium 6.3, EPSS 0.29%

Data leakage between pooling allocator instances

Action: Upgrade wasmtime to 36.0.7 or later.

cargo update -p wasmtime --precise 36.0.7
cargo update -p wasmtime --precise 42.0.2
cargo update -p wasmtime --precise 43.0.1

Affected

introducedfixedlast affected
0.0.0-036.0.7-
37.0.042.0.2-
43.0.043.0.1-

Fixed versions

36.0.742.0.243.0.1

Sources

CVE-2026-34988 · published · modified · JSON