{"action":"Upgrade wasmtime to 0.33.1 or later.","affected":[{"fixed":"0.33.1","introduced":"0.0.0-0"},{"fixed":"0.34.1","introduced":"0.34.0"}],"component":"wasmtime","cve_ids":["CVE-2022-23636","CVE-2022-31169"],"ecosystem":"crates.io","epss":0.00772,"exploited":false,"fixed_versions":["0.33.1","0.34.1"],"ghsa_id":"GHSA-7f6x-jwh5-m9r4","id":"tcs_01M5KF86N2XX95FE69GJRGCMZA","modified_at":"2026-10-12T18:00:03.401494554Z","published_at":"2022-02-17T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0096","https://crates.io/crates/wasmtime","https://rustsec.org/advisories/RUSTSEC-2022-0096.html","https://github.com/bytecodealliance/wasmtime/commit/886ecc562040bef61faf19438c22285c2d62403a"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0096","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0096"}],"summary":"Invalid drop of VMExternRef from partially-initialized instances in the pooling instance allocator"}