# Update Wasmtime WASI to fix filesystem sandbox escape \(\#63140\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/6e2fae619c45ffc90e5bcf5cfbfcef8bb693fbe1)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: 6e2fae619c45ffc90e5bcf5cfbfcef8bb693fbe1

Requested commit: 6e2fae619c45ffc90e5bcf5cfbfcef8bb693fbe1

Commit: 6e2fae619c45ffc90e5bcf5cfbfcef8bb693fbe1

Tree: 4559cf8981bcc7e458d0be3ed29e061d8012d5f4

Author: Bennet Bo Fenner

Committer: GitHub

## Message

```
Update Wasmtime WASI to fix filesystem sandbox escape (#63140)

`wasmtime-wasi` was locked to 36.0.12, which resolved the vulnerable
`cap-primitives` 3.4.4 release. That version is affected by a
trailing-slash symlink handling issue that can bypass capability
filesystem confinement.

Raise the workspace's minimum `wasmtime-wasi` version to 36.0.14 and
refresh the Wasmtime dependency family. This resolves `cap-primitives`
to the patched 3.4.6 release while remaining on Wasmtime's existing 36.x
line.

Verified with `cargo check --locked -p extension_host` and by confirming
the reverse dependency tree resolves `cap-primitives` 3.4.6 through
`wasmtime-wasi` 36.0.14.

See
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg

Release Notes:

- Fixed a potential filesystem sandbox escape when running extensions.
```

## Parents

- [fdfd00e44ef6392c4afc3c62e09fc6eccfde91b3](https://git.cafe/gitcafe/zed/commit/fdfd00e44ef6392c4afc3c62e09fc6eccfde91b3?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/6e2fae619c45ffc90e5bcf5cfbfcef8bb693fbe1?format=markdown)