Skip to content

Vendor

wasmerio vulnerabilities

2 published CVES affecting wasmerio, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
0
Low
1
Unscored
0
CISA KEV
0
Atom feed of wasmerio alerts

Products

Latest wasmerio CVEs

Newest publication first

  1. CVE-2024-38358 Symlink bypasses filesystem sandbox in wasmer

    Published
    LowCVSS 2.9 EPSS 0.20%

    Wasmer is a web assembly (wasm) Runtime supporting WASIX, WASI and Emscripten. If the preopened directory has a symlink pointing outside, WASI programs can traverse the symlink and access host filesystem if the caller sets both oflags::creat and rights::fd_write. Programs can als...

  2. CVE-2023-51661 Filesystem sandbox not enforced in wasmer-cli

    Published
    HighCVSS 8.6 EPSS 0.60%

    Wasmer is a WebAssembly runtime that enables containers to run anywhere: from Desktop to the Cloud, Edge and even the browser. Wasm programs can access the filesystem outside of the sandbox. Service providers running untrusted Wasm code on Wasmer can unexpectedly expose the host...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.