Categories ⋅ Keywords ⋅ Packages Advisories for package 'wasmtime-wasi-http' October 20, 2026 LOW RUSTSEC-2026-0377: Vulnerability in wasmtime-wasi-http wasi-http p3: forwarded trailers aren't checked against is_forbidden_header hook October 20, 2026 MEDIUM RUSTSEC-2026-0375: Vulnerability in wasmtime-wasi-http wasi-http p3: Guests can set incorrect content-length for spliced response bodies October 20, 2026 LOW RUSTSEC-2026-0376: Vulnerability in wasmtime-wasi-http wasi-http: Guests can add conflicting content lengths to messages October 14, 2026 MEDIUM RUSTSEC-2026-0351: Vulnerability in wasmtime-wasi-http wasi-http: Request with long url before query parameter crashes host October 14, 2026 LOW RUSTSEC-2026-0350: Vulnerability in wasmtime-wasi-http Guests can send absolute-form HTTP requests to different hosts October 2, 2026 MEDIUM RUSTSEC-2026-0320: Vulnerability in wasmtime-wasi-http Wasmtime wasi:http implementation panics with a zero timeout supplied September 29, 2026 MEDIUM RUSTSEC-2026-0313: Vulnerability in wasmtime-wasi-http Outgoing HTTP body write allows guest-driven host memory exhaustion