RUSTSEC-2026-0222: Stores can mix up type indices between engines

> Stores can mix up type indices between engines

| Details | |
| ------------------- | ---------------------------------------------- |
| Package | `wasmtime` |
| Version | `36.0.12` |
| URL | [https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9](https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9) |
| Date | 2026-07-31 |
| Patched versions | `>=24.0.12, <25.0.0,>=36.0.13, <37.0.0,>=46.0.2, <47.0.0,>=47.0.3` |

This is an entry in the RustSec database for the Wasmtime security advisory
located at
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9
For more information see the GitHub-hosted security advisory.

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2026-0222.html) for additional details.

Start with the linked RustSec advisory and inspect the repository's Cargo manifests and lockfile for the affected wasmtime dependency. Confirm whether an affected version is used, then verify the dependency is on one of the listed patched versions and run the project's Rust tests.

Written by the indexing model from the issue text.