Low, CVSS 2.1
Exception tags can cause host data structures to be unaligned
crates.io wasmtime · Upgrade to 49.0.3 or 48.0.6 by release line · >= 47.0.0, < 48.0.6; >= 49.0.0, < 49.0.3 · CVE-2026-119133 · GHSA-p79w-pv2r-29qp · amended
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 982 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,020 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
Actionable
26–29 of 29 matching · newest first
- Medium, CVSS 6.2
Component-model handle tables are capped only per instance and charged to no limit
crates.io wasmtime · Upgrade to 49.0.3, 48.0.6 or 36.0.18 by release line · >= 0.0.0-0, < 36.0.18; >= 37.0.0, < 48.0.6; >= 49.0.0, < 49.0.3 · CVE-2026-119134 · GHSA-q554-3cjc-rx7p · amended
- Medium, CVSS 5.9
Panic when invoking an async-lifted function via
callcrates.io wasmtime · Upgrade to 49.0.3 or 48.0.6 by release line · >= 46.0.0, < 48.0.6; >= 49.0.0, < 49.0.3 · CVE-2026-119139 · GHSA-m6w2-jwq2-cv2c · amended
- Medium, CVSS 5.9
Out-of-bounds zero-length stream writes can panic
crates.io wasmtime · Upgrade to 49.0.3 or 48.0.6 by release line · >= 46.0.0, < 48.0.6; >= 49.0.0, < 49.0.3 · CVE-2026-119143 · GHSA-93g3-36p8-x2gc · amended
A vendor fix does not resolve your finding until you verify it in your own systems.