Reported

November 5, 2022

Issued

May 2, 2025

Package

wasmtime (crates.io)

Type

Vulnerability

Aliases

• CVE-2022-39393
• GHSA-wh6w-3828-g9qf

References

• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-wh6w-3828-g9qf

CVSS Score

8.6 HIGH

CVSS Details

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality Impact

High

Integrity Impact

None

Availability Impact

None

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Patched

• >=1.0.2, <2.0.0
• >=2.0.2

Description

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-wh6w-3828-g9qf. For more information see the GitHub-hosted security advisory.

Advisory available under CC0-1.0 license.