{"action":"Upgrade wasmtime to 24.0.4 or later.","affected":[{"fixed":"24.0.4","introduced":"10.0.0"},{"fixed":"33.0.2","introduced":"25.0.0"},{"fixed":"34.0.2","introduced":"34.0.0"}],"component":"wasmtime","cve_ids":["CVE-2025-53901"],"ecosystem":"crates.io","epss":0.00381,"exploited":false,"fixed_versions":["24.0.4","33.0.2","34.0.2"],"ghsa_id":"GHSA-fm79-3f68-h2fc","id":"tcs_01M5KFA09AADZT4X5GZYW6ZCHN","modified_at":"2026-10-12T18:00:06.810612130Z","published_at":"2025-07-18T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0046","https://crates.io/crates/wasmtime","https://rustsec.org/advisories/RUSTSEC-2025-0046.html","https://github.com/bytecodealliance/wasmtime/pull/11277"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0046","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0046"}],"summary":"Host panic with `fd_renumber` WASIp1 function"}