{"action":"Upgrade wasmtime to 38.0.3 or later.","affected":[{"fixed":"38.0.3","introduced":"38.0.0"}],"component":"wasmtime","cve_ids":["CVE-2025-62711"],"ecosystem":"crates.io","epss":0.0041,"exploited":false,"fixed_versions":["38.0.3"],"ghsa_id":"GHSA-4h67-722j-5pmc","id":"tcs_01M5KFABJY8T4P5XAQ313KCBG5","modified_at":"2026-10-12T18:00:12.401338698Z","published_at":"2025-07-18T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0112","https://crates.io/crates/wasmtime","https://rustsec.org/advisories/RUSTSEC-2025-0112.html","https://github.com/bytecodealliance/wasmtime/pull/11592"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0112","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0112"},{"source":"nvd","source_id":"CVE-2025-62711","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62711"}],"summary":"Possible host crash with host-to-wasm component intrinsics"}