RUSTSEC-2026-0355

Source
https://rustsec.org/advisories/RUSTSEC-2026-0355
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0355.json
JSON Data
https://api.osv.dev/v1/vulns/RUSTSEC-2026-0355
Aliases
  • GHSA-63h4-6cx9-pjfj
Published
2026-10-14T12:00:00Z
Modified
2026-10-14T20:30:03Z
Severity
  • 5.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Panic viewing component model stream or future as the wrong type
Details

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-63h4-6cx9-pjfj For more information see the GitHub-hosted security advisory.

Database specific
{
    "license":  "CC0-1.0"
}
References

Affected packages

crates.io / wasmtime

Package

Name
wasmtime
View open source insights on deps.dev
Purl
pkg:cargo/wasmtime

Affected ranges

Type
SEMVER
Events
Introduced
46.0.0
Fixed
48.0.6
Introduced
49.0.0
Fixed
49.0.3

Ecosystem specific

{
    "affected_functions":  null,
    "affects":  {
        "arch":  [],
        "functions":  [],
        "os":  []
    }
}

Database specific

categories
[]
cvss
"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
informational
null
source
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0355.json"