{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"21.0.0"}],"component":"wasmtime-bin","cve_ids":["CVE-2024-47763"],"ecosystem":"PyPI","epss":0.00245,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q8hx-mm92-4wvg","id":"tcs_01M5KGN3H4VC9GTYH0H4097KNS","modified_at":"2026-05-21T15:00:30.599847384Z","published_at":"2024-10-09T18:15:08.863Z","references":["https://osv.dev/vulnerability/PYSEC-2024-312","https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_tail_call","https://github.com/bytecodealliance/wasmtime/pull/8540","https://github.com/bytecodealliance/wasmtime/pull/8682","https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q8hx-mm92-4wvg","https://github.com/WebAssembly/proposals","https://github.com/webassembly/tail-call"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-312","url":"https://osv.dev/vulnerability/PYSEC-2024-312"}],"summary":"Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The run"}