PyPI/wasmtime CVE-2021-32629: unknown, EPSS 0.46%
Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the C
Action: Upgrade wasmtime to 0.27.0 or later.
pip install wasmtime==0.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.27.0 | - |
Fixed versions
| 0.27.0 |
Sources
- osv: PYSEC-2021-87
- https://github.com/bytecodealliance/wasmtime/commit/95559c01aaa7c061088a433040f31e8291fb09d0
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hpqh-2wqx-7qp5
- https://www.fastly.com/security-advisories/memory-access-due-to-code-generation-flaw-in-cranelift-module
- https://crates.io/crates/cranelift-codegen
CVE-2021-32629 · published · modified · JSON