RUSTSEC-2026-0423

Source
https://rustsec.org/advisories/RUSTSEC-2026-0423
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0423.json
JSON Data
https://api.osv.dev/v1/vulns/RUSTSEC-2026-0423
Aliases
  • GHSA-qw58-7h65-crq2
Published
2026-10-29T12:00:00Z
Modified
2026-10-30T10:45:03Z
Summary
Cross-engine type confusion with host-created struct-types-with-supertypes
Details

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qw58-7h65-crq2 For more information see the GitHub-hosted security advisory.

Database specific
{
    "license":  "CC0-1.0"
}
References

Affected packages

crates.io / wasmtime

Package

Name
wasmtime
View open source insights on deps.dev
Purl
pkg:cargo/wasmtime

Affected ranges

Type
SEMVER
Events
Introduced
47.0.0
Fixed
48.0.8
Introduced
49.0.0
Fixed
49.0.5
Introduced
50.0.0
Fixed
50.0.1

Ecosystem specific

{
    "affected_functions":  null,
    "affects":  {
        "arch":  [],
        "functions":  [],
        "os":  []
    }
}

Database specific

categories
[]
cvss
null
informational
null
source
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0423.json"