Threats tagged 'ghsa-x9q9-vvfc-mrm5'

Wasmtime versions 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contain a denial of service vulnerability. This occurs when dropping the Future returned by TypedFunc::call_async causes a panic in the host. The issue arises because if the guest task has not started, the cleanup code unwraps an error while searching for work items, leading to a crash in embedders that cancel pending calls.