package
Wasmtime: security advisories, deprecations and releases
Python bindings for Wasmtime, a standalone WebAssembly runtime.
Get Wasmtime alerts Free. No account. One email, and only when something touches your
stack.
- Items, 90 days
- 1
- Critical
- 0
- Last critical
- none
- This week
- 0
Releases 1
- HIGH Envoy releases · 12 Oct 2026
Envoy v1.38.7 released with security and bug fixes
Envoy 1.38.7 updates wasmtime to fix CVE-2026-54786, resolves multiple race conditions in route configuration handling, and corrects Prometheus histogram bucket indexing.
CVE-2026-54786
Only hear about Wasmtime when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.