PYSEC-2024-327

En bref

Publiée
Mise à jour
CVE
CVE-2024-30266
Alias
GHSA-75hq-h6g9-h4q5, RUSTSEC-2024-0441
CVSS_V3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. This vulnerability has been patched in version 19.0.1.

Paquets affectés

PaquetVersions
PyPI · wasmtimeintroduced 0, last affected 19.0.0

Références

Sources

SourceLicence
OSV.devCC-BY 4.0 — PyPA Advisory Database