Wasmtime GitHub notifications bot (Oct 19 2026 at 18:18): Wasmtime GitHub notifications bot (Oct 19 2026 at 18:18):pchickey opened PR #14823 from pchickey:fix_ghsa_jxcf_main to bytecodealliance:main:
by changing the WasiHttpHooks::is_forbidden_header method to WasiHttpHooks::forbidden_header_filter, which is a boxed (arced) closure instead of a direct method. Embedders which customized WasiHttpHooks::is_forbidden_header must switch to using this new method in order to block trailers which are not the DEFAULT_FORBIDDEN_HEADERS.
Fixes GHSA-jxcf-8qw5-5c33
<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.mdPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
Wasmtime GitHub notifications bot (Oct 19 2026 at 18:18):pchickey removed the review request for wasmtime-wasi-reviewers from PR #14823.
Wasmtime GitHub notifications bot (Oct 19 2026 at 18:18):pchickey requested rvolosatovs for a review on PR #14823.
Wasmtime GitHub notifications bot (Oct 19 2026 at 18:18):pchickey requested wasmtime-wasi-reviewers for a review on PR #14823.
Wasmtime GitHub notifications bot (Oct 19 2026 at 18:26)::thumbs_up: rvolosatovs submitted PR review.
Wasmtime GitHub notifications bot (Oct 19 2026 at 18:28):alexcrichton added PR #14823 wasmtime-wasi-http p3: apply forbidden header check to trailers to the merge queue.
Wasmtime GitHub notifications bot (Oct 19 2026 at 18:51):github-merge-queue[bot] removed PR #14823 wasmtime-wasi-http p3: apply forbidden header check to trailers from the merge queue.
Wasmtime GitHub notifications bot (Oct 19 2026 at 19:09):pchickey updated PR #14823.
Wasmtime GitHub notifications bot (Oct 19 2026 at 21:05):pchickey added PR #14823 wasmtime-wasi-http p3: apply forbidden header check to trailers to the merge queue.
Wasmtime GitHub notifications bot (Oct 19 2026 at 21:42)::check: pchickey merged PR #14823.
Wasmtime GitHub notifications bot (Oct 19 2026 at 21:42):pchickey removed PR #14823 wasmtime-wasi-http p3: apply forbidden header check to trailers from the merge queue.
Last updated: Oct 31 2026 at 23:03 UTC