GHSA-qw58-7h65-crq2
Cross-engine type confusion with host-created struct-types-with-supertypes
GHSA-qw58-7h65-crq2 is a vulnerability with no CVSS score yet in wasmtime, published October 29, 2026. No source lists public exploit code. Fixed in wasmtime 48.0.8.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
48.0.8wasmtime
Description
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qw58-7h65-crq2 For more information see the GitHub-hosted security advisory.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wasmtimecrates.io | 47.0.0 up to 48.0.8, 49.0.0 up to 49.0.5, 50.0.0 up to 50.0.1 | 48.0.849.0.550.0.1 |
What each source reports
OSVRUSTSEC-2026-0423No score
Cross-engine type confusion with host-created struct-types-with-supertypes
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qw58-7h65-crq2 For more information see the GitHub-hosted security advisory.
- Record
RUSTSEC-2026-0423- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.