{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.29"}],"component":"wabt","cve_ids":["CVE-2022-43281"],"ecosystem":"PyPI","epss":0.00339,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGHXHFFRDG43Z6JPAGHAVB","modified_at":"2026-05-21T15:00:30.363072350Z","published_at":"2022-10-28T21:15:09.883Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43187","https://github.com/WebAssembly/wabt/issues/1981"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"PYSEC-2022-43187","url":"https://osv.dev/vulnerability/PYSEC-2022-43187"}],"summary":"wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h."}