PyPI/wasmtime-bin CVE-2025-61670: low 3.3, EPSS 0.19%
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the `anyref` or `externref` WebAssembly values. This is caused by a regress
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 37.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-268
- https://github.com/bytecodealliance/wasmtime/releases/tag/v37.0.2
- https://github.com/bytecodealliance/wasmtime/commit/adff9d9d0f09569203709d5687e5a7dc8e1ad0a3
- https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vvp9-h8p2-xwfc
CVE-2025-61670 · published · modified · JSON