{"action":"Upgrade wasmtime to 0.30.0 or later.","affected":[{"fixed":"0.30.0","introduced":"0"}],"component":"wasmtime","cve_ids":["CVE-2021-39216","CVE-2021-39218","CVE-2021-39219"],"ecosystem":"PyPI","epss":0.00307,"exploited":false,"fixed_versions":["0.30.0"],"ghsa_id":"GHSA-4873-36h9-wv49","id":"tcs_01M5KGCBHNFAH15EV8A85KQ6G3","modified_at":"2024-03-15T00:05:20.369060Z","published_at":"2021-09-17T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-321","https://crates.io/crates/wasmtime","https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4873-36h9-wv49","https://github.com/bytecodealliance/wasmtime/commit/398a73f0dd862dbe703212ebae8e34036a18c11c"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-321","url":"https://osv.dev/vulnerability/PYSEC-2021-321"}],"summary":"Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulnerability. There was an invalid free and ou"}