Upcoming Security Release for Wasmtime on 2025-11-11

7 views
Skip to first unread message

Alex Crichton

unread,
Nov 5, 2025, 3:27:46 PMNov 5
to sec-an...@bytecodealliance.org
The Wasmtime project would like to announce a forthcoming security release of Wasmtime.

The release will be made available on 2025-11-11 at approximately 17:00 UTC. Additionally, an advisory will be made available on the same date and time at https://github.com/advisories.

The highest severity issue fixed in this release is LOW based on the classification scheme defined by CVSS.

Alex Crichton

unread,
Nov 11, 2025, 2:21:51 PMNov 11
to sec-an...@bytecodealliance.org
[Update 2025-11-11] Security releases available

Wasmtime version 24.0.5, 36.0.3, 37.0.3, and 38.0.4 are now available on crates.io. Additionally, binary releases are available on Github for the Wasmtime C-API shared library and CLI at https://github.com/bytecodealliance/wasmtime/releases.

This release fixes the following security issues rated LOW:

  Unsound API access to a WebAssembly shared linear memory

Reply all
Reply to author
Forward
0 new messages