Host panic when component is cancelled under some conditions

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com
• wasmtime · crates.io

Timeline

Detection, updates, and resolution for this record.

1. Oct 14, 2026 · GitHub Advisory Database

   Detected

   This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-3r89-v5mq-j5xf For more information see the GitHub-hosted security advisory.

2. Oct 14, 2026 · GitHub Advisory Database

   Fix available

   wasmtime fixed in 48.0.6

3. Oct 14, 2026 · GitHub Advisory Database

   Fix available

   wasmtime fixed in 48.0.6

4. Oct 14, 2026 · GitHub Advisory Database

   Updated

   This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-3r89-v5mq-j5xf For more information see the GitHub-hosted security advisory.

Affected

• crates.io wasmtime46.0.0 → 48.0.6

Sources

• GitHub Advisory DatabasePackage advisoryGHSA-3r89-v5mq-j5xf

  GitHub Advisory Database record mirrored by OSV.

  github.com
• OSV.devPackage advisoryRUSTSEC-2026-0354

  Host panic when component is cancelled under some conditions

  osv.dev

References

• PACKAGE · crates.io
• WEB · github.com
• ADVISORY · rustsec.org