This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8. For more information see the GitHub-hosted security advisory.
wasmtime-wasi 20.0.2
This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
wasmtime-wasi
(23 total, 7 outdated, 1 possibly insecure)
Crate | Required | Latest | Status |
---|---|---|---|
anyhow | ^1.0.22 | 1.0.99 | up to date |
async-trait | ^0.1.71 | 0.1.89 | up to date |
bitflags | ^2.0 | 2.9.4 | up to date |
bytes | ^1.4 | 1.10.1 | up to date |
cap-fs-ext | ^3.0.0 | 3.4.4 | up to date |
cap-net-ext | ^3.0.0 | 3.4.4 | up to date |
cap-rand | ^3.0.0 | 3.4.4 | up to date |
cap-std | ^3.0.0 | 3.4.4 | up to date |
cap-time-ext | ^3.0.0 | 3.4.4 | up to date |
fs-set-times | ^0.20.1 | 0.20.3 | up to date |
futures | ^0.3.27 | 0.3.31 | up to date |
io-extras | ^0.18.1 | 0.19.0 | out of date |
io-lifetimes | ^2.0.3 | 3.0.1 | out of date |
once_cell | ^1.12.0 | 1.21.3 | up to date |
rustix | ^0.38.31 | 1.1.2 | out of date |
system-interface | ^0.27.1 | 0.27.3 | up to date |
thiserror | ^1.0.43 | 2.0.16 | out of date |
tokio | ^1.26.0 | 1.47.1 | up to date |
tracing | ^0.1.26 | 0.1.41 | up to date |
url | ^2.3.1 | 2.5.7 | up to date |
wasmtime ⚠️ | ^20.0.2 | 36.0.2 | out of date |
wiggle | =20.0.2 | 36.0.2 | out of date |
windows-sys | ^0.52.0 | 0.61.0 | out of date |
(5 total, 1 outdated, 1 possibly insecure)
Crate | Required | Latest | Status |
---|---|---|---|
tempfile | ^3.1.0 | 3.22.0 | up to date |
test-log | ^0.2 | 0.2.18 | up to date |
tokio | ^1.26.0 | 1.47.1 | up to date |
tracing-subscriber | ^0.3.1 | 0.3.20 | up to date |
wasmtime ⚠️ | ^20.0.2 | 36.0.2 | out of date |
wasmtime
: Wasmtime doesn't fully sandbox all the Windows device filenamesThis is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8. For more information see the GitHub-hosted security advisory.
wasmtime
: Race condition could lead to WebAssembly control-flow integrity and type safety violationsThis is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7qmx-3fpx-r45m. For more information see the GitHub-hosted security advisory.