wasmtime-wasi vulnerabilities (crates.io)
11 vulnerabilities.
-
wasmtime-wasicrates.io wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving 6.4 Medium -
wasmtime-wasicrates.io Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename 8.8 High -
wasmtime-wasicrates.io Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd_readdir 2.1 Low -
wasmtime-wasicrates.io Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps 6.9 Medium -
wasmtime-wasicrates.io Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes 5.9 Medium -
wasmtime-wasicrates.io Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoff 5.1 Medium -
wasmtime-wasicrates.io Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow 6.9 Medium -
wasmtime-wasicrates.io Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination 6.5 Medium -
wasmtime-wasicrates.io Wasmtime: Leak in WASIp1 `fd_renumber` implementation 2.3 Low -
wasmtime-wasicrates.io Wasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction 7.5 High -
wasmtime-wasicrates.io Wasmtime has host panic with `fd_renumber` WASIp1 function 3.5 Low