Threats tagged 'ghsa-59gg-q3p6-vwvr'

A vulnerability in Wasmtime before versions 36.0.18, 48.0.6, and 49.0.3 allows unbounded host memory growth. The issue arises because resource handle tables are capped only per component instance and do not account for allocations charged to any ResourceLimiter or StoreLimits. This enables a malicious guest to repeatedly allocate resources and instantiate sub-components, bypassing intended limits.