Findings

RUSTSEC-2026-0361

Panic when pending calls are run after a trap

Published Oct 14, 2026 · updated Oct 14, 2026

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hmwq-g22x-qjw5 For more information see the GitHub-hosted security advisory.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · GitHub Advisory Database

    Detected

    This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hmwq-g22x-qjw5 For more information see the GitHub-hosted security advisory.

  2. Oct 14, 2026 · GitHub Advisory Database

    Fix available

    wasmtime fixed in 48.0.6

  3. Oct 14, 2026 · GitHub Advisory Database

    Fix available

    wasmtime fixed in 48.0.6

  4. Oct 14, 2026 · GitHub Advisory Database

    Updated

    This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hmwq-g22x-qjw5 For more information see the GitHub-hosted security advisory.

Affected

  • crates.io wasmtime46.0.0 → 48.0.6

Sources

References

RUSTSEC-2026-0361 · ZeroDay Findings