Skip to content

Commit 66b9a94

Browse files
fix(deps): upgrade wasmtime to 42.0.2 to resolve security advisories
Upgrade wasmtime and wasmtime-wasi from 41.0.1 to 42.0.2 to fix 7 security vulnerabilities flagged by cargo-deny: - RUSTSEC-2026-0089: sandbox escape via Cranelift aarch64 - RUSTSEC-2026-0091: OOB write in component model string transcoding - RUSTSEC-2026-0092: panic on misaligned UTF-16 strings - RUSTSEC-2026-0093: heap OOB read in UTF-16 to latin1+utf16 transcoding - RUSTSEC-2026-0094: improperly masked table.grow return value (Winch) - RUSTSEC-2026-0095: sandbox-escaping memory access (Winch) - RUSTSEC-2026-0096: miscompiled guest heap access on aarch64 Also removes the deprecated Config::async_support() call which no longer has any effect in wasmtime 42. Signed-off-by: StreamKit Devin <devin@streamkit.dev> Co-Authored-By: Claudio Costa <cstcld91@gmail.com>
1 parent 4552035 commit 66b9a94

File tree

3 files changed

+140
-177
lines changed

3 files changed

+140
-177
lines changed

0 commit comments

Comments
 (0)