MEDIUM5.7

RUSTSEC-2026-0315

`call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification

Details

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m63x-6p34-q65x For more information see the GitHub-hosted security advisory.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/wasmtime

Introduced in: 47.0.0Fixed in: 48.0.3

Upgrade wasmtime to 48.0.3 or newer (ecosystem crates.io).

References

https://crates.io/crates/wasmtime[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2026-0315.html[ADVISORY]
https://github.com/bytecodealliance/wasmtime/pull/14407[WEB]