Reported

July 31, 2026

Issued

July 31, 2026

Package

wasmtime (crates.io)

Type

Vulnerability

Aliases

• GHSA-2hw9-mc66-jc2q

References

• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-2hw9-mc66-jc2q

CVSS Score

2 LOW

CVSS Details

Attack Complexity

High

Attack Requirements

Present

Attack Vector

Network

Privileges Required

High

Availability Impact to the Subsequent System

None

Confidentiality Impact to the Subsequent System

None

Integrity Impact to the Subsequent System

None

User Interaction

Passive

Availability Impact to the Vulnerable System

Low

Confidentiality Impact to the Vulnerable System

None

Integrity Impact to the Vulnerable System

Low

CVSS Vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Patched

• >=46.0.2, <47.0.0
• >=47.0.3

Unaffected

• <46.0.0

Description

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-2hw9-mc66-jc2q For more information see the GitHub-hosted security advisory.

Advisory available under CC0-1.0 license.