{"action":"Upgrade wasmtime to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0.0.0-0"},{"fixed":"2.0.2","introduced":"2.0.0"}],"component":"wasmtime","cve_ids":["CVE-2022-39394"],"ecosystem":"crates.io","epss":0.00354,"exploited":false,"fixed_versions":["1.0.2","2.0.2"],"ghsa_id":"GHSA-h84q-m8rr-3v9q","id":"tcs_01M5KF86VWAHM127Q6RQP0VR5P","modified_at":"2026-10-12T18:00:06.112472830Z","published_at":"2022-11-07T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0097","https://crates.io/crates/wasmtime","https://rustsec.org/advisories/RUSTSEC-2022-0097.html","https://github.com/bytecodealliance/wasmtime/commit/087d9d7becf7422b3f872a3bcd5d97bb7ce7ff36"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0097","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0097"}],"summary":"Out of bounds write in `wasmtime_trap_code` C API function"}