tocsin

crates.io/wasmtime-wasi CVE-2026-54786: unknown, EPSS 0.37%

Leak in WASIp1 `fd_renumber` implementation

Action: Upgrade wasmtime-wasi to 24.0.10 or later.

cargo update -p wasmtime-wasi --precise 24.0.10
cargo update -p wasmtime-wasi --precise 36.0.11
cargo update -p wasmtime-wasi --precise 44.0.3
cargo update -p wasmtime-wasi --precise 45.0.2

Affected

introducedfixedlast affected
0.0.0-024.0.10-
25.0.036.0.11-
37.0.044.0.3-
45.0.045.0.2-

Fixed versions

24.0.1036.0.1144.0.345.0.2

Sources

CVE-2026-54786 · published · modified · JSON