{"action":"Upgrade wasmtime to 0.30.0 or later.","affected":[{"fixed":"0.30.0","introduced":"0"}],"component":"wasmtime","cve_ids":["CVE-2021-39216","CVE-2021-39218","CVE-2021-39219"],"ecosystem":"PyPI","epss":0.00307,"exploited":false,"fixed_versions":["0.30.0"],"ghsa_id":"GHSA-v4cp-h94r-m7xf","id":"tcs_01M5KF3ANS0W9G1VC4SPRDAJK9","modified_at":"2026-07-08T06:29:18.419386524Z","published_at":"2021-09-20T19:54:05Z","references":["https://osv.dev/vulnerability/GHSA-v4cp-h94r-m7xf","https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-v4cp-h94r-m7xf","https://nvd.nist.gov/vuln/detail/CVE-2021-39216","https://github.com/bytecodealliance/wasmtime/commit/101998733b74624cbd348a2366d05760b40181f3","https://crates.io/crates/wasmtime","https://github.com/bytecodealliance/wasmtime","https://github.com/bytecodealliance/wasmtime-py/compare/0.29.0...0.30.0","https://github.com/pypa/advisory-database/tree/main/vulns/wasmtime/PYSEC-2021-320.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WAVBRYDDUIY2ZR3K3FO4BVYJKIMJ5TP7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2Z33FTXFQ6EOINVEQIP4DFBG53G5XIY","https://rustsec.org/advisories/RUSTSEC-2021-0110.html"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-v4cp-h94r-m7xf#PyPI/wasmtime","url":"https://osv.dev/vulnerability/GHSA-v4cp-h94r-m7xf"}],"summary":"Use after free passing `externref`s to Wasm in Wasmtime"}