Search results

RUSTSEC-2026-0087: Wasmtime segfault or unused out-of-sandbox load with f64x2.splat operator on Cranelift x86-64

Status: Open.

#23 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0085: Panic when lifting flags component value

Status: Open.

#22 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0091: Out-of-bounds write or crash when transcoding component model strings

Status: Open.

#21 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0086: Host data leakage with 64-bit tables and Winch

Status: Open.

#20 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0094: Improperly masked return value from table.grow with Winch compiler backend

Status: Open.

#19 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0088: Data leakage between pooling allocator instances

Status: Open.

#17 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0093: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding

Status: Open.

#18 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0090: Use-after-free bug after cloning wasmtime::Linker

Status: Open.

#16 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0089: Host panic when Winch compiler executes table.fill

Status: Open.

#14 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0096: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

Status: Open.

#15 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0092: Panic when transcoding misaligned component model UTF-16 strings

Status: Open.

#13 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026

RUSTSEC-2026-0095: Wasmtime with Winch compiler backend may allow a sandbox-escaping memory access

Status: Open.

#12 In openprx/prx-waf;

· github-actions opened on Apr 13, 2026