{"generated_at":"2026-10-26T16:19:36.387Z","stack":{"id":"rust","label":"Rust & WebAssembly","group":"Web & runtimes","products":["Wasmtime"]},"status":{"level":"degraded","label":"Degraded","live":1,"critical":0,"open":1},"grade":{"letter":"A","line":"Nothing serious on the rail"},"temp":{"temp_c":5,"label":"5°C","name":"Iced. Chilling."},"links":{"page":"https://pwned.coffee/menu/rust","json":"https://pwned.coffee/menu/rust.json","llms":"https://pwned.coffee/menu/rust/llms.txt","rss":"https://pwned.coffee/feed.xml?stack=rust","changes":"https://pwned.coffee/changes.json?stack=rust","grade":"https://pwned.coffee/grade/rust","badge":"https://pwned.coffee/badge/rust.svg"},"count":1,"incidents":[{"id":"wasmtime-sandbox-escape","url":"https://pwned.coffee/i/wasmtime-sandbox-escape","title":"Wasmtime: sandbox escape","summary":"Two critical flaws in Wasmtime could allow a malicious WebAssembly module to escape the sandbox, affecting ARM64 systems.","severity":"unknown","brew":{"name":"House blend","temp":"?"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"order_reason":"the rest, by urgency","status":"live","exploited":false,"exploitation":"none_known","exploitation_label":"No known exploitation","public_poc":false,"receipt":[],"kev_due":null,"do":"Check the Wasmtime vendor advisory for a fix and restrict running untrusted WebAssembly modules on ARM64 systems meanwhile.","affected":"Wasmtime","fixed_versions":[],"fix_lines":[],"downstream":[],"fix_note":null,"not_affected_products":[],"vendor_notes":[],"related":[],"cvss":null,"severity_source":null,"spreading_until":null,"still_cooking":[],"published":null,"checked_at":"2026-10-26T16:17:37.362Z","unverified_ids":[],"ids":[],"aliases":[],"stack":["rust"],"first_seen":"2026-10-26T11:52:41.000Z","updated_at":"2026-10-26T11:52:41.000Z"}],"recently_past":[]}