Wasmtime usually ships inside other software (proxies, plugin hosts, serverless runtimes, agent tool sandboxes), not as a standalone install. To check:

• Rust projects: cargo tree -i wasmtime, then confirm the version is 36.0.19, 48.0.7, 49.0.4 or 50.x. Versions 37 to 42 need moving to a fixed line.
• Binaries and containers: search your SBOMs or scanner output for wasmtime and cranelift-codegen.
• Prioritize aarch64 hosts (Graviton, Ampere, Apple Silicon build farms) and anything that compiles Wasm modules supplied by users or agents.
• Until you can upgrade, only accept Wasm from trusted sources, or precompile it on a patched build host.