tocsin

CVE-2026-27572

2 advisories.

crates.io/wasmtime CVE-2026-27572: medium, EPSS 0.74%

Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance

Action: Upgrade wasmtime to 24.0.6 or later.

cargo update -p wasmtime --precise 24.0.6
cargo update -p wasmtime --precise 36.0.6
cargo update -p wasmtime --precise 40.0.4

Affected

introducedfixedlast affected
024.0.6-
25.0.036.0.6-
37.0.040.0.4-

Fixed versions

24.0.636.0.640.0.4

Sources

CVE-2026-27572 · published · modified · JSON

crates.io/wasmtime CVE-2026-27572: unknown, EPSS 0.74%

Panic adding excessive fields to a `wasi:http/types.fields` instance

Action: Upgrade wasmtime to 24.0.6 or later.

cargo update -p wasmtime --precise 24.0.6
cargo update -p wasmtime --precise 36.0.6
cargo update -p wasmtime --precise 40.0.4
cargo update -p wasmtime --precise 41.0.4

Affected

introducedfixedlast affected
0.0.0-024.0.6-
25.0.036.0.6-
37.0.040.0.4-
41.0.041.0.4-

Fixed versions

24.0.636.0.640.0.441.0.4

Sources

CVE-2026-27572 · published · modified · JSON