Upcoming Security Release for Wasmtime on 2026-07-31

[Alex Crichton]

The Wasmtime project would like to announce a forthcoming security release of Wasmtime.

The releases will be made available on 2026-07-31 at approximately 18:00 UTC. Additionally, an advisory will be made available on the same date and time at https://github.com/advisories.

The highest severity issue fixed in this release is LOW based on the classification scheme defined by CVSS.

[Alex Crichton]

[Update 2026-07-31] Security releases available

Wasmtime versions 24.0.12, 36.0.13, 46.0.2, and 47.0.3 are now available on crates.io. Additionally, binary releases are available on Github for the Wasmtime C-API shared library and CLI at https://github.com/bytecodealliance/wasmtime/releases.

This release fixes the following security issuess rated LOW:

 

Stores can mix up type indices between engines
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9

Preemption and traps during bulk operations enable breaking internal VM state

https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-2hw9-mc66-jc2q