Security vulnerabilities found in a small Go-based WASM runtime by AI agents
The author describes building Epsilon, a small WebAssembly (WASM) runtime written in Go that serves as a pure instruction interpreter (~11k lines of code) without JIT compilation. The runtime is designed to be embeddable and provide a sandbox for untrusted code. The article explores how many security vulnerabilities AI agents could find in this WASM runtime,
andreapivetta.com12d ago