Even if my main use of web-assembly is in outside-of-browser scenarios, I've found this to be quite an interesting read. I am not sure how easily exploitable most of the attacks described here are (e.g. wasi opening another file is not that big of a deal as WASI can already limit the _allowed folders_:
https://www.usenix.org/system/files/sec20-lehmann.pdf
Last updated: Nov 22 2024 at 17:03 UTC