VulnerabilitiesTwo Wasmtime Sandbox Escapes Patched: What the Fixes Mean for Anyone Running Untrusted Code
Maintainers of the WebAssembly runtime shipped fixes for a Cranelift compiler bug and an ARM64-only branch flaw, both of which let a crafted module break out of the sandbox.
