Skip to content

CVE record · 1 source

CVE-2026-121440

CVSS 3.7

Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the WasiHttpHooks::is_forbidden_header hook in…

Vendor: Bytecodealliance
Product: wasmtime
CVSS v3.1: 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-424

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

6

CVE NVD 2d ago

Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the WasiHttpHooks::is_forbidden_header hook in…

Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the WasiHttpHooks::is_forbidden_header hook in wasi-http p3. WASIp3 guests can forward a request or response body so its trailers…

CVSS 3.7 CVE-2026-121440 Bytecodealliance