{"action":"Upgrade wasmtime to 0.30.0 or later.","affected":[{"fixed":"0.30.0","introduced":"0"}],"component":"wasmtime","cve_ids":["CVE-2021-39216","CVE-2021-39218","CVE-2021-39219"],"ecosystem":"PyPI","epss":0.00307,"exploited":false,"fixed_versions":["0.30.0"],"ghsa_id":"GHSA-4873-36h9-wv49","id":"tcs_01M5KGCBQ2MQ0YQD5S99FTQ2D2","modified_at":"2024-03-15T00:05:20.369060Z","published_at":"2021-09-17T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-322","https://crates.io/crates/wasmtime","https://github.com/bytecodealliance/wasmtime/commit/b39f087414f27ae40c44449ed5d1154e03449bff","https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q879-9g95-56mx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-322","url":"https://osv.dev/vulnerability/PYSEC-2021-322"}],"summary":"Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0 is affected by a type confusion vulnerability. As a Rust library the `wasmtime` crate clearly marks which func"}