ZeroDay Findings
Sign inSign up

Findings

RUSTSEC-2026-0358

Yielding in a component start function can lead to a host panic

Published Oct 14, 2026 · updated Oct 14, 2026

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5hhx-4wrr-3j9g For more information see the GitHub-hosted security advisory.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · GitHub Advisory Database

    Detected

    This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5hhx-4wrr-3j9g For more information see the GitHub-hosted security advisory.

  2. Oct 14, 2026 · GitHub Advisory Database

    Fix available

    wasmtime fixed in 48.0.6

  3. Oct 14, 2026 · GitHub Advisory Database

    Fix available

    wasmtime fixed in 48.0.6

  4. Oct 14, 2026 · GitHub Advisory Database

    Updated

    This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5hhx-4wrr-3j9g For more information see the GitHub-hosted security advisory.

Affected

  • crates.io wasmtime46.0.0 → 48.0.6

Sources

References