{"id":"ghsa-ghsa-9pvw-hwfg-92h5","seq":661297,"kind":"advisory","title":"Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type","url":"https://github.com/advisories/GHSA-9pvw-hwfg-92h5","permalink":"https://vulnpulse.app/items/ghsa-ghsa-9pvw-hwfg-92h5","summary":"影響: rust:wasmtime >= 46.0.0, < 48.0.7 → 48.0.7, rust:wasmtime >= 49.0.0, < 49.0.4 → 49.0.4\nWasmtime may panic when the host lowers a component model stream or future into a guest, if the host created that stream or future with one payload type and the guest expects a different one. This can happen when an embedder creates a stream or future, passes it through a guest, receives it back under a type-erased type such as StreamAny or FutureAny, and then passes it to a guest function with a different payload type. GHSA-63h4-6cx9-pjfj is a related advisory also fixing issues within this ar…","severity":"medium","techs":["rust","wasmtime"],"cves":["CVE-2026-115892"],"tags":["GHSA-9pvw-hwfg-92h5","wasmtime","wasmtime"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-23T22:04:45.000Z","fetched_at":"2026-10-24T04:50:51.468Z"}