Categories ⋅ Keywords ⋅ Packages Advisories for package 'wasmtime-wasi-http' October 30, 2026 LOW RUSTSEC-2026-0421: Vulnerability in wasmtime-wasi-http wasi-http p2: outgoing content-length can be invalid or not match body October 20, 2026 LOW RUSTSEC-2026-0376: Vulnerability in wasmtime-wasi-http wasi-http: Guests can add conflicting content lengths to messages October 20, 2026 MEDIUM RUSTSEC-2026-0375: Vulnerability in wasmtime-wasi-http wasi-http p3: Guests can set incorrect content-length for spliced response bodies October 20, 2026 LOW RUSTSEC-2026-0377: Vulnerability in wasmtime-wasi-http wasi-http p3: forwarded trailers aren't checked against is_forbidden_header hook October 14, 2026 MEDIUM RUSTSEC-2026-0351: Vulnerability in wasmtime-wasi-http wasi-http: Request with long url before query parameter crashes host October 14, 2026 LOW RUSTSEC-2026-0350: Vulnerability in wasmtime-wasi-http Guests can send absolute-form HTTP requests to different hosts October 2, 2026 MEDIUM RUSTSEC-2026-0320: Vulnerability in wasmtime-wasi-http Wasmtime wasi:http implementation panics with a zero timeout supplied September 29, 2026 MEDIUM RUSTSEC-2026-0313: Vulnerability in wasmtime-wasi-http Outgoing HTTP body write allows guest-driven host memory exhaustion