WASI path_open(TRUNCATE) bypasses FilePerms::WRITE host restriction
| Details |
|
| Package |
wasmtime-wasi |
| Version |
44.0.1 |
| URL |
GHSA-2r75-cxrj-cmph |
| Date |
2026-05-21 |
| Patched versions |
>=24.0.9, <25.0.0,>=36.0.10, <37.0.0,>=44.0.2, <45.0.0,>=45.0.0 |
This is an entry in the RustSec database for the Wasmtime security advisory
located at
GHSA-2r75-cxrj-cmph
For more information see the GitHub-hosted security advisory.
See advisory page for additional details.
wasmtime-wasi44.0.1>=24.0.9, <25.0.0,>=36.0.10, <37.0.0,>=44.0.2, <45.0.0,>=45.0.0This is an entry in the RustSec database for the Wasmtime security advisory
located at
GHSA-2r75-cxrj-cmph
For more information see the GitHub-hosted security advisory.
See advisory page for additional details.