CGA-qw5f-37rc-wcc4

Published

Last updated

https://images.chainguard.dev/security/CGA-qw5f-37rc-wcc4

Package

wash

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2025-53901
GHSA-fm79-3f68-h2fc

Severity

3.5

Low

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2025-53901
https://github.com/advisories/GHSA-fm79-3f68-h2fc

Updates

Status

Pending upstream fix

Impact

The vulnerability is associated with wasmtime-wasi, which has tightly coupled dependencies pinned to version 26.0.1. To remediate, upstream must align and upgrade the entire wasmtime dependency set to version 33.0.2. Once this is addressed, we can proceed with patching the vulnerability.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-qw5f-37rc-wcc4

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company