Threats tagged 'ghsa-63fr-xrxj-8wrx'

A vulnerability in wasmtime-wasi in Wasmtime versions before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 causes a trailing slash to be re-appended to rename source paths. This behavior leads to the renameat system call on macOS and FreeBSD hosts following directory symbolic links. Consequently, a guest with sandbox write access can rename a relative symlink such as "up/" to move host directories into its sandbox, enabling unauthorized read or write access to those directories.