{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.3.1"}],"component":"wasmer","cve_ids":["CVE-2024-38358"],"ecosystem":"crates.io","epss":0.002,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-55f3-3qvg-8pv5","id":"tcs_01M5KESYDBMKQA9JN05RF6RNME","modified_at":"2026-09-10T03:50:14.890753117Z","published_at":"2024-06-07T19:40:00Z","references":["https://osv.dev/vulnerability/GHSA-55f3-3qvg-8pv5","https://github.com/wasmerio/wasmer/security/advisories/GHSA-55f3-3qvg-8pv5","https://nvd.nist.gov/vuln/detail/CVE-2024-38358","https://github.com/wasmerio/wasmer/commit/b9483d022c602b994103f78ecfe46f017f8ac662","https://github.com/wasmerio/wasmer"],"severity":{"label":"low","score":2.9},"sources":[{"source":"osv","source_id":"GHSA-55f3-3qvg-8pv5","url":"https://osv.dev/vulnerability/GHSA-55f3-3qvg-8pv5"}],"summary":"Symlink bypasses filesystem sandbox"}