RUSTSEC-2026-0423: Cross-engine type confusion with host-created struct-types-with-supertypes

Q: Where can I find the vendor's technical details and remediation guidance?

The RustSec entry points to the GitHub-hosted Wasmtime security advisory and references Wasmtime pull request 15078. The provided data does not identify affected or fixed versions.

Published Oct 29, 2026

Updated

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qw58-7h65-crq2 For more information see the GitHub-hosted security advisory.

Affected Software

3 affected componentsFixes available

rust/wasmtime>=47.0.0<48.0.8

48.0.8

rust/wasmtime>=49.0.0<49.0.5

49.0.5

rust/wasmtime>=50.0.0<50.0.1

50.0.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade rust/wasmtime to a version that resolves this vulnerability.
Fixed in 48.0.8
Upgrade
Upgrade rust/wasmtime to a version that resolves this vulnerability.
Fixed in 49.0.5
Upgrade
Upgrade rust/wasmtime to a version that resolves this vulnerability.
Fixed in 50.0.1

Event History

Oct 29, 2026

Advisory Published

via OSV·12:00 PM

Data Sourced

via OSV·12:00 PM

DescriptionAffected Software

Frequently Asked Questions

Where can I find the vendor's technical details and remediation guidance?

The RustSec entry points to the GitHub-hosted Wasmtime security advisory and references Wasmtime pull request 15078. The provided data does not identify affected or fixed versions.

RUSTSEC-2026-0423: Cross-engine type confusion with host-created struct-types-with-supertypes

Affected Software

Remediation

Event History

Frequently Asked Questions

Where can I find the vendor's technical details and remediation guidance?

Company

Resources

Contact

Frequently Asked Questions

Where can I find the vendor's technical details and remediation guidance?