This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8. For more information see the GitHub-hosted security advisory.
wasmtime-wasi 20.0.2
This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
wasmtime-wasi
(23 total, 5 outdated, 1 possibly insecure)
Crate | Required | Latest | Status |
---|---|---|---|
anyhow | ^1.0.22 | 1.0.98 | up to date |
async-trait | ^0.1.71 | 0.1.88 | up to date |
bitflags | ^2.0 | 2.9.1 | up to date |
bytes | ^1.4 | 1.10.1 | up to date |
cap-fs-ext | ^3.0.0 | 3.4.4 | up to date |
cap-net-ext | ^3.0.0 | 3.4.4 | up to date |
cap-rand | ^3.0.0 | 3.4.4 | up to date |
cap-std | ^3.0.0 | 3.4.4 | up to date |
cap-time-ext | ^3.0.0 | 3.4.4 | up to date |
fs-set-times | ^0.20.1 | 0.20.3 | up to date |
futures | ^0.3.27 | 0.3.31 | up to date |
io-extras | ^0.18.1 | 0.18.4 | up to date |
io-lifetimes | ^2.0.3 | 2.0.4 | up to date |
once_cell | ^1.12.0 | 1.21.3 | up to date |
rustix | ^0.38.31 | 1.0.7 | out of date |
system-interface | ^0.27.1 | 0.27.3 | up to date |
thiserror | ^1.0.43 | 2.0.12 | out of date |
tokio | ^1.26.0 | 1.46.1 | up to date |
tracing | ^0.1.26 | 0.1.41 | up to date |
url | ^2.3.1 | 2.5.4 | up to date |
wasmtime ⚠️ | ^20.0.2 | 34.0.1 | out of date |
wiggle | =20.0.2 | 34.0.1 | out of date |
windows-sys | ^0.52.0 | 0.60.2 | out of date |
(5 total, 1 outdated, 1 possibly insecure)
Crate | Required | Latest | Status |
---|---|---|---|
tempfile | ^3.1.0 | 3.20.0 | up to date |
test-log | ^0.2 | 0.2.18 | up to date |
tokio | ^1.26.0 | 1.46.1 | up to date |
tracing-subscriber | ^0.3.1 | 0.3.19 | up to date |
wasmtime ⚠️ | ^20.0.2 | 34.0.1 | out of date |
wasmtime
: Wasmtime doesn't fully sandbox all the Windows device filenamesThis is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8. For more information see the GitHub-hosted security advisory.
wasmtime
: Race condition could lead to WebAssembly control-flow integrity and type safety violationsThis is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7qmx-3fpx-r45m. For more information see the GitHub-hosted security advisory.