Wasmtime patches two critical Cranelift sandbox escapes
Wasmtime shipped 50.0.0 to fix CVE-2026-115889 and CVE-2026-115893, twin 9.9 Cranelift flaws that let malicious WebAssembly modules escape the host sandbox.
Wasmtime shipped 50.0.0 to fix CVE-2026-115889 and CVE-2026-115893, twin 9.9 Cranelift flaws that let malicious WebAssembly modules escape the host sandbox.