{"schema_version":1,"title":"wasmtime (crates.io) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in wasmtime (crates.io): 0 in the last 7 days and 2 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2025-61670, was published on 14 July 2026.","url":"https://junglewise.ai/threats/technologies/wasmtime","json_url":"https://junglewise.ai/threats/technologies/wasmtime.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/wasmtime","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":11,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":2,"last_365_days":9},"latest":[{"cve":"CVE-2025-61670","cvss":3.3,"epss":0.0019,"slug":"cve-2025-61670-bytecode-alliance-wasmtime-memory-leak-in-c-api-anyref-and","title":"Bytecode Alliance Wasmtime memory leak in C API anyref and externref types","severity":"low","exploited":false,"published_at":"2026-07-14T17:48:35+00:00","url":"https://junglewise.ai/threats/cve-2025-61670-bytecode-alliance-wasmtime-memory-leak-in-c-api-anyref-and"},{"cve":"CVE-2026-58494","cvss":6.5,"slug":"cve-2026-58494-bytecode-alliance-wasmtime-improper-permission-preservation-in","title":"Bytecode Alliance Wasmtime improper permission preservation in wasmtime-wasi","severity":"medium","exploited":false,"published_at":"2026-07-08T21:16:54+00:00","url":"https://junglewise.ai/threats/cve-2026-58494-bytecode-alliance-wasmtime-improper-permission-preservation-in"},{"cve":"CVE-2026-44216","cvss":7.5,"epss":0.0004,"slug":"cve-2026-44216-bytecode-alliance-wasmtime-denial-of-service-via-table-allocation","title":"Bytecode Alliance Wasmtime denial of service via table allocation panic","severity":"high","exploited":false,"published_at":"2026-05-14T15:16:47.793+00:00","url":"https://junglewise.ai/threats/cve-2026-44216-bytecode-alliance-wasmtime-denial-of-service-via-table-allocation"},{"cve":"CVE-2026-35186","cvss":6.1,"slug":"cve-2026-35186-bytecode-alliance-wasmtime-out-of-bounds-access-in-winch-compiler","title":"Bytecode Alliance Wasmtime out-of-bounds access in Winch compiler","severity":"medium","exploited":false,"published_at":"2026-04-10T15:32:49+00:00","url":"https://junglewise.ai/threats/cve-2026-35186-bytecode-alliance-wasmtime-out-of-bounds-access-in-winch-compiler"},{"cve":"CVE-2026-34987","cvss":9.2,"slug":"cve-2026-34987-bytecode-alliance-wasmtime-sandbox-escape-in-winch-compiler","title":"Bytecode Alliance Wasmtime sandbox escape in Winch compiler backend","severity":"critical","exploited":false,"published_at":"2026-04-10T15:31:18+00:00","url":"https://junglewise.ai/threats/cve-2026-34987-bytecode-alliance-wasmtime-sandbox-escape-in-winch-compiler"},{"cve":"CVE-2026-35195","cvss":6.1,"slug":"cve-2026-35195-bytecode-alliance-wasmtime-out-of-bounds-write-in-string","title":"Bytecode Alliance Wasmtime out-of-bounds write in string transcoding","severity":"medium","exploited":false,"published_at":"2026-04-09T20:24:12+00:00","url":"https://junglewise.ai/threats/cve-2026-35195-bytecode-alliance-wasmtime-out-of-bounds-write-in-string"},{"cve":"CVE-2026-34988","cvss":2.3,"slug":"cve-2026-34988-bytecode-alliance-wasmtime-data-leakage-in-pooling-allocator","title":"Bytecode Alliance Wasmtime data leakage in pooling allocator","severity":"low","exploited":false,"published_at":"2026-04-09T20:23:58+00:00","url":"https://junglewise.ai/threats/cve-2026-34988-bytecode-alliance-wasmtime-data-leakage-in-pooling-allocator"},{"cve":"CVE-2026-34983","cvss":3.1,"epss":0.0012,"slug":"cve-2026-34983-bytecode-alliance-wasmtime-use-after-free-in-linker-cloning","title":"Bytecode Alliance Wasmtime use-after-free in Linker cloning","severity":"low","exploited":false,"published_at":"2026-04-09T20:23:44+00:00","url":"https://junglewise.ai/threats/cve-2026-34983-bytecode-alliance-wasmtime-use-after-free-in-linker-cloning"},{"cve":"CVE-2026-34971","cvss":7.8,"epss":0.0026,"slug":"cve-2026-34971-bytecode-alliance-wasmtime-sandbox-escape-in-cranelift-backend-on","title":"Bytecode Alliance Wasmtime sandbox escape in Cranelift backend on aarch64","severity":"high","exploited":false,"published_at":"2026-04-09T19:16:24.663+00:00","url":"https://junglewise.ai/threats/cve-2026-34971-bytecode-alliance-wasmtime-sandbox-escape-in-cranelift-backend-on"},{"cve":"CVE-2024-47813","cvss":3.1,"epss":0.0015,"slug":"cve-2024-47813-bytecode-alliance-wasmtime-race-condition-in-internal-type","title":"Bytecode Alliance Wasmtime race condition in internal type registry","severity":"low","exploited":false,"published_at":"2024-10-09T19:14:35+00:00","url":"https://junglewise.ai/threats/cve-2024-47813-bytecode-alliance-wasmtime-race-condition-in-internal-type"},{"cve":"CVE-2024-47763","cvss":5.5,"epss":0.0025,"slug":"cve-2024-47763-bytecode-alliance-wasmtime-denial-of-service-via-tail-calls","title":"Bytecode Alliance Wasmtime denial of service via tail calls","severity":"medium","exploited":false,"published_at":"2024-10-09T19:14:03+00:00","url":"https://junglewise.ai/threats/cve-2024-47763-bytecode-alliance-wasmtime-denial-of-service-via-tail-calls"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"surrealdb (crates.io)","slug":"surrealdb","vulnerabilities":59,"url":"https://junglewise.ai/threats/technologies/surrealdb"},{"name":"zebrad (crates.io)","slug":"zebrad","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/zebrad"},{"name":"rustfs (crates.io)","slug":"rustfs","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/rustfs"},{"name":"deepseek-tui (crates.io)","slug":"deepseek-tui","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/deepseek-tui"},{"name":"deno (crates.io)","slug":"deno","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/deno"},{"name":"codewhale-tui (crates.io)","slug":"codewhale-tui","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/codewhale-tui"},{"name":"mise (crates.io)","slug":"mise","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/mise"},{"name":"nimiq-primitives (crates.io)","slug":"nimiq-primitives","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/nimiq-primitives"},{"name":"wasm3 (crates.io)","slug":"wasm3","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/wasm3"},{"name":"actix-web (crates.io)","slug":"actix-web","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/actix-web"},{"name":"diesel (crates.io)","slug":"diesel","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/diesel"},{"name":"nimiq-blockchain (crates.io)","slug":"nimiq-blockchain","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/nimiq-blockchain"}],"technology":{"hub":true,"name":"wasmtime (crates.io)","slug":"wasmtime","vendor":{"name":"crates.io","slug":"crates-io","url":"https://junglewise.ai/threats/vendors/crates-io"},"aliases":[],"homepage":"https://wasmtime.dev/","repo_url":"https://github.com/bytecodealliance/wasmtime","description":"A standalone JIT-style runtime for WebAssembly that implements the WASI standard.","url":"https://junglewise.ai/threats/technologies/wasmtime"},"most_severe":[{"cve":"CVE-2026-34987","cvss":9.2,"slug":"cve-2026-34987-bytecode-alliance-wasmtime-sandbox-escape-in-winch-compiler","title":"Bytecode Alliance Wasmtime sandbox escape in Winch compiler backend","severity":"critical","exploited":false,"published_at":"2026-04-10T15:31:18+00:00","url":"https://junglewise.ai/threats/cve-2026-34987-bytecode-alliance-wasmtime-sandbox-escape-in-winch-compiler"},{"cve":"CVE-2026-34971","cvss":7.8,"epss":0.0026,"slug":"cve-2026-34971-bytecode-alliance-wasmtime-sandbox-escape-in-cranelift-backend-on","title":"Bytecode Alliance Wasmtime sandbox escape in Cranelift backend on aarch64","severity":"high","exploited":false,"published_at":"2026-04-09T19:16:24.663+00:00","url":"https://junglewise.ai/threats/cve-2026-34971-bytecode-alliance-wasmtime-sandbox-escape-in-cranelift-backend-on"},{"cve":"CVE-2026-44216","cvss":7.5,"epss":0.0004,"slug":"cve-2026-44216-bytecode-alliance-wasmtime-denial-of-service-via-table-allocation","title":"Bytecode Alliance Wasmtime denial of service via table allocation panic","severity":"high","exploited":false,"published_at":"2026-05-14T15:16:47.793+00:00","url":"https://junglewise.ai/threats/cve-2026-44216-bytecode-alliance-wasmtime-denial-of-service-via-table-allocation"},{"cve":"CVE-2026-58494","cvss":6.5,"slug":"cve-2026-58494-bytecode-alliance-wasmtime-improper-permission-preservation-in","title":"Bytecode Alliance Wasmtime improper permission preservation in wasmtime-wasi","severity":"medium","exploited":false,"published_at":"2026-07-08T21:16:54+00:00","url":"https://junglewise.ai/threats/cve-2026-58494-bytecode-alliance-wasmtime-improper-permission-preservation-in"},{"cve":"CVE-2026-35186","cvss":6.1,"slug":"cve-2026-35186-bytecode-alliance-wasmtime-out-of-bounds-access-in-winch-compiler","title":"Bytecode Alliance Wasmtime out-of-bounds access in Winch compiler","severity":"medium","exploited":false,"published_at":"2026-04-10T15:32:49+00:00","url":"https://junglewise.ai/threats/cve-2026-35186-bytecode-alliance-wasmtime-out-of-bounds-access-in-winch-compiler"},{"cve":"CVE-2026-35195","cvss":6.1,"slug":"cve-2026-35195-bytecode-alliance-wasmtime-out-of-bounds-write-in-string","title":"Bytecode Alliance Wasmtime out-of-bounds write in string transcoding","severity":"medium","exploited":false,"published_at":"2026-04-09T20:24:12+00:00","url":"https://junglewise.ai/threats/cve-2026-35195-bytecode-alliance-wasmtime-out-of-bounds-write-in-string"},{"cve":"CVE-2024-47763","cvss":5.5,"epss":0.0025,"slug":"cve-2024-47763-bytecode-alliance-wasmtime-denial-of-service-via-tail-calls","title":"Bytecode Alliance Wasmtime denial of service via tail calls","severity":"medium","exploited":false,"published_at":"2024-10-09T19:14:03+00:00","url":"https://junglewise.ai/threats/cve-2024-47763-bytecode-alliance-wasmtime-denial-of-service-via-tail-calls"},{"cve":"CVE-2025-61670","cvss":3.3,"epss":0.0019,"slug":"cve-2025-61670-bytecode-alliance-wasmtime-memory-leak-in-c-api-anyref-and","title":"Bytecode Alliance Wasmtime memory leak in C API anyref and externref types","severity":"low","exploited":false,"published_at":"2026-07-14T17:48:35+00:00","url":"https://junglewise.ai/threats/cve-2025-61670-bytecode-alliance-wasmtime-memory-leak-in-c-api-anyref-and"},{"cve":"CVE-2024-47813","cvss":3.1,"epss":0.0015,"slug":"cve-2024-47813-bytecode-alliance-wasmtime-race-condition-in-internal-type","title":"Bytecode Alliance Wasmtime race condition in internal type registry","severity":"low","exploited":false,"published_at":"2024-10-09T19:14:35+00:00","url":"https://junglewise.ai/threats/cve-2024-47813-bytecode-alliance-wasmtime-race-condition-in-internal-type"},{"cve":"CVE-2026-34983","cvss":3.1,"epss":0.0012,"slug":"cve-2026-34983-bytecode-alliance-wasmtime-use-after-free-in-linker-cloning","title":"Bytecode Alliance Wasmtime use-after-free in Linker cloning","severity":"low","exploited":false,"published_at":"2026-04-09T20:23:44+00:00","url":"https://junglewise.ai/threats/cve-2026-34983-bytecode-alliance-wasmtime-use-after-free-in-linker-cloning"}],"generated_at":"2026-09-26T13:07:00.120236+00:00"}