Is wasmtime-jit-debug affected by GHSA-9ghp-w2hm-vfpf?

crates.io wasmtime-jit-debug is affected in <24.0.0.

Is GHSA-9ghp-w2hm-vfpf being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

medium

GHSA-9ghp-w2hm-vfpf

Q: Is GHSA-9ghp-w2hm-vfpf being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

crates.io · wasmtime-jit-debug

Summary

wasmtime_jit_debug Dumps Undefined Memory by `JitDumpFile`

Severity: medium
Also known as: RUSTSEC-2024-0442
Published: 2025-06-17

References

https://github.com/bytecodealliance/wasmtime/issues/8905
https://github.com/bytecodealliance/wasmtime/commit/b5e31a5c33725ab8a7dfbe8505c56b5cf282ffed
https://github.com/bytecodealliance/wasmtime

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.