Stream: git-wasmtime

Topic: wasmtime / PR #14819 Security Fixes for 48.0.7

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:05):

pchickey opened PR #14819 from pchickey:fixes-48.0.7 to bytecodealliance:release-48.0.0:

• wasi-http: Guests can add conflicting content lengths to messages
  GHSA-r8xh-cgf7-392j

• wasi-http p3: forwarded trailers aren't checked against is_forbidden_header hook
  GHSA-jxcf-8qw5-5c33

• wasi-http p3: Guests can set incorrect content-length for spliced response bodies
  GHSA-9prg-84vf-g5fc

• Cranelift backend on aarch64 can jump to incorrect target on large Wasm br_table instruction
  GHSA-mghf-wjfp-p5xm

• Update rustls to 0.23.46
  #14768

• Panic lowering a host-created component model stream into a guest that expects a different payload type.
  GHSA-9pvw-hwfg-92h5

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:05):

pchickey removed the review request for wasmtime-compiler-reviewers from PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:05):

pchickey requested fitzgen for a review on PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:05):

pchickey requested wasmtime-compiler-reviewers for a review on PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:05):

pchickey removed the review request for wasmtime-wasi-reviewers from PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:05):

pchickey requested rvolosatovs for a review on PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:05):

pchickey requested wasmtime-wasi-reviewers for a review on PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:05):

pchickey requested wasmtime-core-reviewers for a review on PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:05):

pchickey requested wasmtime-default-reviewers for a review on PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:10):

:thumbs_up: alexcrichton submitted PR review.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:11):

alexcrichton commented on PR #14819:

I think the tests/component-model submodule here got updated by accident (causing CI failures)

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:13):

pchickey commented on PR #14819:

Yep - fixing now

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:14):

pchickey updated PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:19):

pchickey has enabled auto merge for PR #14819.

Wasmtime GitHub notifications bot (Oct 19 2026 at 18:41):

:check: pchickey merged PR #14819.

Last updated: Oct 31 2026 at 23:03 UTC