CVE-2026-119130

Vendor

Bytecodealliance

Product

wasmtime

CVSS v3.1

2.6 AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Weakness

CWE-20

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 0
   CVE NVD 7d ago

   Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path-with-query values in wasmtime-wasi-http are…

   Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path-with-query values in wasmtime-wasi-http are paths, so absolute-form URLs are written verbatim as the HTTP/1.1 request target…

   CVSS 2.6 CVE-2026-119130 Bytecodealliance