{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.33"}],"component":"wabt","cve_ids":["CVE-2023-46331"],"ecosystem":"PyPI","epss":0.00222,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGKFE2E1PRV2PR1HYHJ7Q2","modified_at":"2026-05-21T15:00:30.397549548Z","published_at":"2023-10-23T17:15:08.590Z","references":["https://osv.dev/vulnerability/PYSEC-2023-319","https://github.com/WebAssembly/wabt/issues/2310"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2023-319","url":"https://osv.dev/vulnerability/PYSEC-2023-319"}],"summary":"WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault."}