[aungzayyanaing]

Updates

• References

Comments
Add the official Wasmtime 42.0.0 release reference. The release notes list the wasi:http header panic fix (GHSA-243v-98vx-264h) and the advisory is fixed in 42.0.0. Reference-only change; no other advisory fields were changed.

[github]

Hi there @alexcrichton! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[Copilot]

🟡 Changes recommended

The advisory omits versions 41.0.0–41.0.3 from its affected ranges even though 41.0.4 is identified as the supported fix, leaving the vulnerability classification incomplete.

1 open issue

• Add the missing affected range for versions 41.0.0–41.0.4 · New

What changed in this PR

This pull request adds the official Wasmtime 42.0.0 release reference to the GHSA-243v-98vx-264h advisory, documenting the release that fixes the wasi:http/types.fields panic.

Changes:

• Adds the Wasmtime v42.0.0 release URL to the references.
• Updates the advisory modification timestamp.

File	Description
advisories/​github-reviewed/​2026/​02/​GHSA-243v-98vx-264h/​GHSA-243v-98vx-264h.json	Adds the official Wasmtime 42.0.0 release reference and updates the advisory modification timestamp.

_{Review effort: Lite (dynamic)}