crates.io/wasmtime-wasi

wasmtime-wasi: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction

Modified: 9/10/2026

Wasmtime has a leak in WASIp1 `fd_renumber` implementation

Modified: 8/26/2026

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

Modified: 10/16/2026

Wasmtime CLI is vulnerable to host panic through its fd_renumber function

Modified: 9/10/2026

WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction

Modified: 10/12/2026

Leak in WASIp1 `fd_renumber` implementation

Modified: 10/12/2026

WASI hard links and renames bypass wasmtime-wasi's FilePerms for destination

Modified: 10/12/2026

Guest can panic host through filesystem datetime overflow

Modified: 10/23/2026

WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption

Modified: 10/23/2026

Excessive allocated memory on the host when guests don't have stdio

Modified: 10/23/2026

fd_readdir copies uninitialized struct padding into guest memory

Modified: 10/23/2026

Guest can panic host through filesystem timestamp before the epoch on wasip3

Modified: 10/23/2026

Filesystem sandbox escape when renaming symlinks with trailing slashes

Modified: 10/14/2026