A critical vulnerability in Wasmtime, the runtime for WebAssembly applications
Corrective updates in Wasmtime versions 6.0.1, 5.0.1, and 4.0.1 have resolved the vulnerability (CVE-2023-26489), which has been classified as critical. This vulnerability allows data to be written to memory outside the bounds allowed for isolated WebAssembly code, potentially enabling an attacker to execute their code outside the WASI isolated environment. Wasmtime is a runtime for executing WebAssembly applications with WASI extensions […]
