FuelLabs / FuelLabs/data-systems

RUSTSEC-2024-0438: Wasmtime doesn't fully sandbox all the Windows device filenames

Open
#464 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
18
Forks
18
PR merge metrics
No merged PRs in 30d

Description

> Wasmtime doesn't fully sandbox all the Windows device filenames

| Details | |
| ------------------- | ---------------------------------------------- |
| Package | `wasmtime` |
| Version | `23.0.3` |
| URL | [https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8](https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8) |
| Date | 2024-11-02 |
| Patched versions | `>=24.0.2, <25.0.0,>=25.0.3, <26.0.0,>=26.0.1` |

This is an entry in the RustSec database for the Wasmtime security advisory
located at
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8.
For more information see the GitHub-hosted security advisory.

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2024-0438.html) for additional details.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.