{"action":"Upgrade wasmtime-wasi to 36.0.17 or later.","affected":[{"fixed":"36.0.17","introduced":"0.0.0-0"},{"fixed":"48.0.4","introduced":"37.0.0"},{"fixed":"49.0.2","introduced":"49.0.0"}],"component":"wasmtime-wasi","cve_ids":["CVE-2026-115380"],"ecosystem":"crates.io","epss":0.00118,"exploited":false,"fixed_versions":["36.0.17","48.0.4","49.0.2"],"ghsa_id":"GHSA-j366-h8gg-77pm","id":"tcs_01M5KFCC1NTYDXVVAJRH62WC4R","modified_at":"2026-10-23T10:55:50.168447586Z","published_at":"2026-10-02T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0321","https://crates.io/crates/wasmtime-wasi","https://rustsec.org/advisories/RUSTSEC-2026-0321.html","https://github.com/bytecodealliance/wasmtime/pull/14481"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0321","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0321"}],"summary":"WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption"}