tocsin

crates.io/wasmtime-wasi: unknown

Filesystem sandbox escape when renaming symlinks with trailing slashes

Action: Upgrade wasmtime-wasi to 36.0.18 or later.

cargo update -p wasmtime-wasi --precise 36.0.18
cargo update -p wasmtime-wasi --precise 48.0.6
cargo update -p wasmtime-wasi --precise 49.0.3

Affected

introducedfixedlast affected
0.0.0-036.0.18-
37.0.048.0.6-
49.0.049.0.3-

Fixed versions

36.0.1848.0.649.0.3

Sources

published · modified · JSON