RUSTSEC-2026-0020: Guest-controlled resource exhaustion in WASI implementations

[github-actions]

Guest-controlled resource exhaustion in WASI implementations

Details
Package	wasmtime
Version	38.0.4
URL	GHSA-852m-cvvp-9p4w
Date	2026-02-24
Patched versions	>=24.0.6, <25.0.0,>=36.0.6, <37.0.0,>=40.0.4, <41.0.0,>=41.0.4

This is an entry in the RustSec database for the Wasmtime security advisory
located at
GHSA-852m-cvvp-9p4w
For more information see the GitHub-hosted security advisory.

See advisory page for additional details.