Upcoming security release for Wasmtime on 2026-01-26
8 views
Skip to first unread message
Chris Fallin
Jan 21, 2026, 5:58:46 PMJan 21
to sec-an...@bytecodealliance.org
The Wasmtime project would like to announce a forthcoming security release of Wasmtime.
The release will be made available on 2026-01-26 at approximately 20:00 UTC. Additionally, an advisory will be made available on the same date and time at https://github.com/advisories.
The highest severity issue fixed in this release is MODERATE based on the classification scheme defined by CVSS.
The release will be made available on 2026-01-26 at approximately 20:00 UTC. Additionally, an advisory will be made available on the same date and time at https://github.com/advisories.
The highest severity issue fixed in this release is MODERATE based on the classification scheme defined by CVSS.
Chris Fallin
Jan 26, 2026, 7:37:22 PMJan 26
to sec-an...@bytecodealliance.org
[Update 2026-01-26] Security releases available
Wasmtime versions 36.0.5, 40.0.3, and 41.0.1 are now available on crates.io. Additionally, binary releases are available on Github for the Wasmtime C-API shared library and CLI at https://github.com/bytecodealliance/wasmtime/releases.
This release fixes the following security issues rated MODERATE:
Wasmtime segfault or unused out-of-sandbox load with `f64.copysign` operator on x86-64
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vc8c-j3xm-xj73
Wasmtime versions 36.0.5, 40.0.3, and 41.0.1 are now available on crates.io. Additionally, binary releases are available on Github for the Wasmtime C-API shared library and CLI at https://github.com/bytecodealliance/wasmtime/releases.
This release fixes the following security issues rated MODERATE:
Wasmtime segfault or unused out-of-sandbox load with `f64.copysign` operator on x86-64
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vc8c-j3xm-xj73
Reply all
Reply to author
Forward
0 new messages