W
Wasmtime
Security Risk Profile
24
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 18, 2025 to present
7
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
3.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
24/100
low
📈 1 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
0Low
5Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Race Condition
1
Most Affected Products
1. bytecodealliance Wasmtime Rust10
2. Wasmtime Wasmtime8
3. rust/wasmtime-wasi7
4. rust/wasmtime6
5. pip/wasmtime-bin1
Recent Vulnerabilities
See more →CVE-2026-104855
CVSS 2.0low
Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state
Oct 2, 2026
CVE-2026-54786
CVSS 2.3low
Wasmtime: Leak in WASIp1 `fd_renumber` implementation
Jul 1, 2026
REDHAT-BUG-2477467
CVSS 7.0high
May 14, 2026🔧 No Patch
REDHAT-BUG-2457008
CVSS 7.0high
Apr 9, 2026🔧 No Patch
CVE-2025-62711
CVSS 2.1low
Wasmtime vulnerable to segfault when using component resources
Oct 24, 2025
CVE-2025-61670
CVSS 1.0low
Wasmtime has memory leak in C API with `externref` and `anyref` types
Oct 7, 2025
CVE-2025-53901
CVSS 3.5low
Wasmtime has host panic with `fd_renumber` WASIp1 function
Jul 18, 2025
Monitor Wasmtime in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.