tocsin

crates.io/wasmtime CVE-2026-35186: unknown, EPSS 0.21%

Improperly masked return value from `table.grow` with Winch compiler backend

Action: Upgrade wasmtime to 36.0.7 or later.

cargo update -p wasmtime --precise 36.0.7
cargo update -p wasmtime --precise 42.0.2
cargo update -p wasmtime --precise 43.0.1

Affected

introducedfixedlast affected
0.0.0-036.0.7-
37.0.042.0.2-
43.0.043.0.1-

Fixed versions

36.0.742.0.243.0.1

Sources

CVE-2026-35186 · published · modified · JSON