https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 11:06:33 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119139 <p>Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports using the async ABI option. An attacker who supplies a component with an async-lifted export can crash the host process when an embedder invokes that export through Func::call.</p> <p>Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports using the async ABI option. An attacker who supplies a component with an async-lifted export can crash the host process when an embedder invokes that export through Func::call.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119139 https://db.gcve.eu/vuln/ghsa-6862-c5q5-q6rc <p>Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports using the async ABI option. An attacker who supplies a component with an async-lifted export can crash the host process when an embedder invokes that export through Func::call.</p> <p>Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports using the async ABI option. An attacker who supplies a component with an async-lifted export can crash the host process when an embedder invokes that export through Func::call.</p> https://db.gcve.eu/vuln/ghsa-6862-c5q5-q6rc https://db.gcve.eu/vuln/ubuntu-cve-2026-119139 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-wasmtime, Ubuntu:26.10: rust-wasmtime, Ubuntu:26.04:LTS: rust-wasmtime</p> <p>Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports using the async ABI option. An attacker who supplies a component with an async-lifted export can crash the host process when an embedder invokes that export through Func::call.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-wasmtime, Ubuntu:26.10: rust-wasmtime, Ubuntu:26.04:LTS: rust-wasmtime</p> <p>Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports using the async ABI option. An attacker who supplies a component with an async-lifted export can crash the host process when an embedder invokes that export through Func::call.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-119139