CVE catalog

CVE-2021-45290

binaryen: CVE-2021-45290

A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	binaryen	sid	`131-2`	fixed
Debian	binaryen	forky	`131-2`	fixed
Debian	binaryen	trixie	`120-4`	fixed
Debian	binaryen	bookworm	`108-1`	fixed
Ubuntu	binaryen	20.04	`89-1`	vulnerable
Ubuntu	binaryen	20.04	`90-1`	vulnerable
Ubuntu	binaryen	20.04	`91-1`	vulnerable
Ubuntu	binaryen	22.04	`99-3`	vulnerable
Ubuntu	binaryen	22.04	`105-1`	vulnerable

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	binaryen	source	sid	`104-1`	unimportant	Not reported	Not reported
Debian	binaryen	source	forky	`104-1`	unimportant	Not reported	Not reported
Debian	binaryen	source	trixie	`104-1`	unimportant	Not reported	Not reported
Debian	binaryen	source	bookworm	`104-1`	unimportant	Not reported	Not reported

Observed: Oct 23, 2026, 6:03:53 PM UTC