{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.36"}],"component":"wabt-bin","cve_ids":["CVE-2025-2368"],"ecosystem":"PyPI","epss":0.00574,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGPADW59VHMH3CM0ES7XG9","modified_at":"2026-05-21T15:00:34.102979768Z","published_at":"2025-03-17T08:15:11.493Z","references":["https://osv.dev/vulnerability/PYSEC-2025-227","https://vuldb.com/?id.299867","https://vuldb.com/?submit.515327","https://github.com/WebAssembly/wabt/issues/2537","https://github.com/WebAssembly/wabt/issues/2556","https://github.com/WebAssembly/wabt/issues/2556#issue-2899598349","https://github.com/WebAssembly/wabt/pull/2541","https://vuldb.com/?ctiid.299867"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2025-227","url":"https://osv.dev/vulnerability/PYSEC-2025-227"}],"summary":"A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/src/"}