The Lab · 2026-04-10 12:22:58 · GitHub Issues
A critical vulnerability in the Wasmtime runtime (CVE GHSA-jhxm-h53p-jm7w) is forcing a major blockchain project to bypass its own security protocols. The vulnerability is a transitive dependency locked deep within the Polkadot-SDK codebase, specifically via the `sc-executor-wasmtime` crate. The dependency is pinned to...
The Lab · 2026-04-20 13:23:01 · GitHub Issues
A critical security vulnerability in the widely-used WebAssembly runtime, Wasmtime, has prompted a major version update to patch a memory safety flaw. The vulnerability, tracked as CVE-2026-34941, stems from an incorrect bounds check during string transcoding, which could allow a malicious WebAssembly module to trigger...
The Lab · 2026-05-10 12:01:45 · GitHub Issues
A security-focused update to the Wasmtime WebAssembly runtime addresses a soundness vulnerability that could expose Rust embedders to data race conditions. The patch, which upgrades the crate from version 26.0 to 36.0, resolves CVE-2025-64345 (GHSA-hc7m-r6v8-hg9q)—an unsound API interaction involving shared linear memo...