Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-61601 State: PUBLISHED Published: 2025-10-09T20:29:25.006Z Last Updated: 2025-10-15T19:47:14.421Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: bigbluebutton Products: bigbluebutton Problem Types: CWE-703 Description: BigBlueButton is an open-source virtual classroom. A Denial of Service (DoS) vulnerability in versions prior to 3.0.13 allows any authenticated user to freeze or crash the entire server by abusing the polling feature's `Choices` response type. By submitting a malicious payload with a massive array in the `answerIds` field, the attacker can cause the current meeting — and potentially all meetings on the server — to become unresp
erIds` field, the attacker can cause the current meeting — and potentially all meetings on the server — to become unresponsive. Version 3.0.13 contains a patch. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-73j3-v3fq-fqx5 - https://github.com/bigbluebutton/bigbluebutton/pull/23662 - https://www.youtube.com/watch?v=BwROSVIYjOY
CVE ID: CVE-2025-61602 State: PUBLISHED Published: 2025-10-09T20:40:04.658Z Last Updated: 2025-10-10T14:30:50.944Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: bigbluebutton Products: bigbluebutton Problem Types: CWE-703 Description: BigBlueButton is an open-source virtual classroom. A denial-of-service (DoS) vulnerability in versions prior to 3.0.13 allows any authenticated user to crash the chat functionality for all participants in a meeting by sending a malformed `reactionEmojiId` in the GraphQL mutation `chatSendMessageReaction`. Version 3.0.13 contains a patch. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
ion 3.0.13 contains a patch. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-45j2-m26c-3pcm - https://github.com/bigbluebutton/bigbluebutton/pull/23651
CVE ID: CVE-2025-61603 State: PUBLISHED Published: 2025-10-02T19:53:36.523Z Last Updated: 2025-10-02T20:27:52.370Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a Web manager for charitable institutions. Versions 3.4.12 and below include an SQL Injection vulnerability which was identified in the /controle/control.php endpoint, specifically in the descricao parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This issue is fixed in version 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeG
n version 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-v8hm-pq8g-c7j4 - https://github.com/LabRedesCefetRJ/WeGIA/commit/84958eed73741a544859eea297908db3b83b3833
CVE ID: CVE-2025-61604 State: PUBLISHED Published: 2025-10-02T20:09:23.348Z Last Updated: 2025-10-02T20:27:37.795Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-352 Description: WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery (CSRF) vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger the action using the victim’s authenticated session. This issue is fixed in version 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/adv
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-59hm-4m9h-ch3m - https://github.com/LabRedesCefetRJ/WeGIA/commit/839de09798f61c9a76043bb2c4b3063d310c5aed
CVE ID: CVE-2025-61605 State: PUBLISHED Published: 2025-10-02T20:13:02.815Z Last Updated: 2025-10-03T15:00:26.377Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profile_pet.php endpoint, specifically in the id_pet parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This issue is fixed in version 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.co
This issue is fixed in version 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-8963-9833-gpx7 - https://github.com/LabRedesCefetRJ/WeGIA/commit/176733543c9b6762bef5ddec7c9c555f76fafa1d
CVE ID: CVE-2025-61606 State: PUBLISHED Published: 2025-10-02T20:25:58.422Z Last Updated: 2025-10-03T14:58:54.113Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-601 Description: WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an Open Redirect vulnerability, identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This issue is fixed in version 3.5.0. Additional Analyst Notes: -
icious payload distribution, or user credential theft. This issue is fixed in version 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-m64v-hm7q-33wr - https://github.com/LabRedesCefetRJ/WeGIA/commit/85051ad14b1e7fa14116e74a90c0bd5480b2ec84
CVE ID: CVE-2025-61622 State: PUBLISHED Published: 2025-10-01T09:55:05.557Z Last Updated: 2025-11-04T21:14:00.912Z Vendors: Apache Software Foundation Products: Apache Fory Problem Types: CWE-502 Description: Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stream that selects pickle-fallback serializer during deserialization, leading to the execution of `pickle.loads`, which is vulnerable to remote code execution. Users are recommended to upgrade to p
to the execution of `pickle.loads`, which is vulnerable to remote code execution. Users are recommended to upgrade to pyfory version 0.12.3 or later, which has removed pickle fallback serializer and thus fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/vfn9hp9qt06db5yo1gmj3l114o3o2csd
CVE ID: CVE-2025-61623 State: PUBLISHED Published: 2025-11-12T09:16:58.139Z Last Updated: 2025-11-12T14:29:43.400Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: CWE-79 Description: Reflected cross-site scripting vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recommended to upgrade to version 24.09.03, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://issues.apache.org/jira/browse/OFBIZ-13295 - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - https://ofbiz.apache.org/release-notes-24.09.03.html - https://lists.apache.or
https://ofbiz.apache.org/security.html - https://ofbiz.apache.org/release-notes-24.09.03.html - https://lists.apache.org/thread/sb2mngrg766qbqt5g29fo0qblk3v4x5y
CVE ID: CVE-2025-61626 State: REJECTED Published: N/A Last Updated: 2025-09-30T02:55:08.724Z Description: No description available.
CVE ID: CVE-2025-61627 State: REJECTED Published: N/A Last Updated: 2025-09-30T02:55:08.088Z Description: No description available.
CVE ID: CVE-2025-61628 State: REJECTED Published: N/A Last Updated: 2025-09-30T02:55:07.603Z Description: No description available.
CVE ID: CVE-2025-61629 State: REJECTED Published: N/A Last Updated: 2025-09-30T02:55:07.135Z Description: No description available.
CVE ID: CVE-2025-61630 State: REJECTED Published: N/A Last Updated: 2025-09-30T02:55:06.634Z Description: No description available.
CVE ID: CVE-2025-61631 State: REJECTED Published: N/A Last Updated: 2025-09-30T02:55:06.131Z Description: No description available.
CVE ID: CVE-2025-61632 State: REJECTED Published: N/A Last Updated: 2025-09-30T02:55:05.646Z Description: No description available.
CVE ID: CVE-2025-61633 State: REJECTED Published: N/A Last Updated: 2025-09-30T02:55:05.024Z Description: No description available.
CVE ID: CVE-2025-61659 State: PUBLISHED Published: 2025-09-29T00:00:00.000Z Last Updated: 2025-10-15T16:07:42.672Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: magicmonty Products: bash-git-prompt Problem Types: CWE-377 Description: bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/magicmonty/bash-git-prompt/issues/561
CVE ID: CVE-2025-61661 State: PUBLISHED Published: 2025-11-18T18:20:42.151Z Last Updated: 2025-11-19T20:14:18.041Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-131 Description: A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicio
on from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a maliciously configured USB device during the boot sequence to trigger this issue. A successful exploitation may lead GRUB to crash, leading to a Denial of Service. Data corruption may be also possible, although given the complexity of the exploit the impact is most likely limited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-61661 - https://bugzilla.redhat.com/show_bug.cgi?id=2413827
CVE ID: CVE-2025-61662 State: PUBLISHED Published: 2025-11-18T18:20:48.351Z Last Updated: 2025-11-19T21:37:06.796Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Description: A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory l
d. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-61662 - https://bugzilla.redhat.com/show_bug.cgi?id=2414683
CVE ID: CVE-2025-61663 State: PUBLISHED Published: 2025-11-18T18:20:52.865Z Last Updated: 2025-11-19T20:14:28.232Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-825 Description: A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this comm
cause the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability. Impact on the data integrity and confidentiality is also not discarded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-61663 - https://bugzilla.redhat.com/show_bug.cgi?id=2414684
CVE ID: CVE-2025-61664 State: PUBLISHED Published: 2025-11-18T18:20:55.212Z Last Updated: 2025-11-19T21:37:14.265Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-825 Description: A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normal_exit command is not properly unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after
y unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after the module has been removed, causing the system to improperly access a previously freed memory location. This leads to a system crash or possible impacts in data confidentiality and integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-61664 - https://bugzilla.redhat.com/show_bug.cgi?id=2414685
CVE ID: CVE-2025-61665 State: PUBLISHED Published: 2025-10-02T20:39:09.658Z Last Updated: 2025-10-03T14:58:14.177Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-287, CWE-200 Description: WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and financial information of members without requiring authentication or authorization. This issue is fixed in version 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github
n. This issue is fixed in version 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-62wp-6qmh-6p5f - https://github.com/LabRedesCefetRJ/WeGIA/commit/828f23a6a760a52b8bb8bfd583cc2b23c42da51e
CVE ID: CVE-2025-61666 State: PUBLISHED Published: 2025-10-02T21:15:47.047Z Last Updated: 2025-10-03T14:15:50.344Z Vendors: traccar Products: traccar Problem Types: CWE-22 Description: Traccar is an open source GPS tracking system. Default installs of Traccar on Windows between versions 6.1- 6.8.1 and non default installs between versions 5.8 - 6.0 are vulnerable to unauthenticated local file inclusion attacks which can lead to leakage of passwords or any file on the file system including the Traccar configuration file. Versions 5.8 - 6.0 are only vulnerable if <entry key='web.override'>./override</entry> is set in the configuration file. Versions 6.1 - 6.8.1 are vulnerable by default as the
web.override'>./override</entry> is set in the configuration file. Versions 6.1 - 6.8.1 are vulnerable by default as the web override is enabled by default. The vulnerable code is removed in version 6.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/traccar/traccar/security/advisories/GHSA-hprc-rph8-fj87 - https://github.com/traccar/traccar/blob/v6.8.1/src/main/java/org/traccar/web/DefaultOverrideServlet.java - https://projectblack.io/blog/jetty-addpath-lfi
CVE ID: CVE-2025-61667 State: PUBLISHED Published: 2025-11-12T18:50:02.940Z Last Updated: 2025-11-12T21:04:11.852Z Vendors: DataDog Products: datadog-agent Problem Types: CWE-276 Description: The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the `opt/datadog-agent/python-scripts/__pycache__` directory during installation. Code in this directory is only run by the Agent during Agent install/upgrades. This could allow an attacker with local access to modify files in this directory, which would then subsequently be run when the
ld allow an attacker with local access to modify files in this directory, which would then subsequently be run when the Agent is upgraded, resulting in local privilege escalation. This issue requires local access to the host and a valid low privilege account to be vulnerable. Note that this vulnerability only impacts the Linux Host Agent. Other variations of the Agent including the container, kubernetes, windows host and other agents are not impacted. Version 7.71.0 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/DataDog/datadog-agent/security/advisories/GHSA-6852-76c5-6cmg
CVE ID: CVE-2025-61668 State: PUBLISHED Published: 2025-10-02T21:46:32.975Z Last Updated: 2025-10-03T13:37:25.520Z Vendors: plone Products: volto Problem Types: CWE-476, CWE-754 Description: Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a specific URL. This issue is fixed in versions 16.34.1, 17.22.2, 18.27.2 and 19.0.0-alpha.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/plone/volto/security/advisories/GHSA-m8
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/plone/volto/security/advisories/GHSA-m8rj-ppph-mj33 - https://github.com/plone/volto/pull/7412 - https://github.com/plone/volto/pull/7413 - https://github.com/plone/volto/commit/58d9f82d2d50ca9a87edbe16fed91762e57c109c - https://github.com/plone/volto/releases/tag/16.34.1 - https://github.com/plone/volto/releases/tag/17.22.2 - https://github.com/plone/volto/releases/tag/19.0.0-alpha.6 - http://github.com/plone/volto/releases/tag/18.27.2
CVE ID: CVE-2025-61670 State: PUBLISHED Published: 2025-10-07T18:49:53.869Z Last Updated: 2025-10-07T19:16:40.499Z Vendors: bytecodealliance Products: wasmtime Problem Types: CWE-772 Description: Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the `anyref` or `externref` WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If `anyref` or `externref` is not used in the C/C++ API then embeddings are also unaffected by the leaky behavior. The `wasmtime` Rust crate is unaffected by this leak. Development of Wasmtime 37.0.0 inclu
fected by the leaky behavior. The `wasmtime` Rust crate is unaffected by this leak. Development of Wasmtime 37.0.0 included a refactoring in Rust of changing the old `ManuallyRooted<T>` type to a new `OwnedRooted<T>` type. This change was integrated into Wasmtime's C API but left the C API in a state which had memory leaks. Additionally the new ownership semantics around this type were not reflected into the C++ API, making it leak-prone. A short version of the change is that previously `ManuallyRooted<T>`, as the name implies, required manual calls to an "unroot" operation. If this was forgotten then the memory was still cleaned up when the `wasmtime_store_t` itself was destroyed eventually
. If this was forgotten then the memory was still cleaned up when the `wasmtime_store_t` itself was destroyed eventually. Documentation of when to "unroot" was sparse and there were already situations prior to 37.0.0 where memory would be leaked until the store was destroyed anyway. All memory, though, was always bound by the store, and destroying the store would guarantee that there were no memory leaks. In migrating to `OwnedRooted<T>` the usage of the type in Rust changed. A manual "unroot" operation is no longer required and it happens naturally as a destructor of the `OwnedRooted<T>` type in Rust itself. These new resource ownership semantics were not fully integrated into the preexisti
OwnedRooted<T>` type in Rust itself. These new resource ownership semantics were not fully integrated into the preexisting semantics of the C/C++ APIs in Wasmtime. A crucial distinction of `OwnedRooted<T>` vs `ManuallyRooted<T>` is that the `OwnedRooted<T>` type allocates host memory outside of the store. This means that if an `OwnedRooted<T>` is leaked then destroying a store does not release this memory and it's a permanent memory leak on the host. This led to a few distinct, but related, issues arising: A typo in the `wasmtime_val_unroot` function in the C API meant that it did not actually unroot anything. This meant that even if embedders faithfully call the function then memory will be
it did not actually unroot anything. This meant that even if embedders faithfully call the function then memory will be leaked. If a host-defined function returned a `wasmtime_{externref,anyref}_t` value then the value was never unrooted. The C/C++ API no longer has access to the value and the Rust implementation did not unroot. This meant that any values returned this way were never unrooted. The goal of the C++ API of Wasmtime is to encode automatic memory management in the type system, but the C++ API was not updated when `OwnedRooted<T>` was added. This meant that idiomatic usage of the C++ API would leak memory due to a lack of destructors on values. These issues have all been fixed in
matic usage of the C++ API would leak memory due to a lack of destructors on values. These issues have all been fixed in a 37.0.2 release of Wasmtime. The implementation of the C and C++ APIs have been updated accordingly and respectively to account for the changes of ownership here. For example `wasmtime_val_unroot` has been fixed to unroot, the Rust-side implementation of calling an embedder-defined function will unroot return values, and the C++ API now has destructors on the `ExternRef`, `AnyRef`, and `Val` types. These changes have been made to the 37.0.x release branch in a non-API-breaking fashion. Changes to the 38.0.0 release branch (and `main` in the Wasmtime repository) include mi
h in a non-API-breaking fashion. Changes to the 38.0.0 release branch (and `main` in the Wasmtime repository) include minor API updates to better accommodate the API semantic changes. The only known workaround at this time is to avoid using `externref` and `anyref` in the C/C++ API of Wasmtime. If avoiding those types is not possible then it's required for users to update to mitigate the leak issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vvp9-h8p2-xwfc - https://github.com/bytecodealliance/wasmtime/commit/adff9d9d0f09569203709d5687e5a7dc8e1ad0a3 - https://github.com/bytecodealliance/wasmtime/relea
dealliance/wasmtime/commit/adff9d9d0f09569203709d5687e5a7dc8e1ad0a3 - https://github.com/bytecodealliance/wasmtime/releases/tag/v37.0.2
CVE ID: CVE-2025-61671 State: REJECTED Published: N/A Last Updated: 2025-10-03T06:41:09.996Z Description: No description available.