RUSTSEC-2026-0269: Filesystem sandbox escape when paths or symlinks contain trailing slashes

> Filesystem sandbox escape when paths or symlinks contain trailing slashes

| Details | |
| ------------------- | ---------------------------------------------- |
| Package | `wasmtime` |
| Version | `36.0.13` |
| URL | [https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg](https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg) |
| Date | 2026-08-20 |
| Patched versions | `>=24.0.13, <25.0.0,>=36.0.14, <37.0.0,>=46.0.3, <47.0.0,>=47.0.4` |

This is an entry in the RustSec database for the Wasmtime security advisory
located at
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg
For more information see the GitHub-hosted security advisory.

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2026-0269.html) for additional details.

Start with the linked Wasmtime security advisory and the RustSec advisory page. The issue names no repository file, test, or entry point, so determine what change this repository expects before starting; completion criteria are not specified in the issue.

Written by the indexing model from the issue text.