Resource exhaustion in Bytecodealliance Wasmtime

CVE-2026-54786

Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those before 44.0.3; and versions 45.0.0 and 45.0.1 contain a native implementation of WASIp1 whic…

Vulnerability class: DoS (Denial of Service)

Affected products

Weakness classification (CWE)

References