Medium
5.7
Panic lowering a host-created component model stream into a guest that expects a different payload type
CVE-2026-115892
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| bytecodealliance | wasmtime | — | — |
| rust | wasmtime |
< 49.0.4 |
49.0.4 |
| crates.io | wasmtime |
≥ 46.0.0, < 48.0.7 ≥ 49.0.0, < 49.0.4 |
48.0.7 49.0.4 |
Original description The description as published by the source.
This is an entry in the RustSec database for the Wasmtime security advisory
located at
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-9pvw-hwfg-92h5
For more information see the GitHub-hosted security advisory.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory rustsec.org
- package github.com
- package crates.io
- web security-advisories@github.com
- web security-advisories@github.com
- web security-advisories@github.com
- web security-advisories@github.com
- web security-advisories@github.com
- web security-advisories@github.com
- web security-advisories@github.com
- web security-advisories@github.com
- web security-advisories@github.com
- web github.com