#wasmtime
-
Two Critical Wasmtime Flaws Let Malicious WebAssembly Escape the Sandbox
Wasmtime's maintainers disclosed two critical bugs in the Cranelift compiler that let an attacker-controlled WebAssembly module break out of the isolating sandbox. Fixes landed on October 19 and 20.