PyPI/wasmtime CVE-2021-39216, CVE-2021-39218, CVE-2021-39219: unknown, EPSS 0.31%

Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.0 and before version 0.30.0 there was a use-after-free bug when passing `externref`s from the host to guest Was

Action: Upgrade wasmtime to 0.30.0 or later.

pip install wasmtime==0.30.0

Affected

Fixed versions

Sources

• osv: PYSEC-2021-320
• https://crates.io/crates/wasmtime
• https://github.com/bytecodealliance/wasmtime/commit/101998733b74624cbd348a2366d05760b40181f3
• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-v4cp-h94r-m7xf

CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 · published 2021-09-17T20:15:00Z · modified 2024-03-15T00:05:20.369060Z · JSON