[Gupta2]

Speaking of WebAssembly security, is it vulnerable to Spectre/CPU style attacks like those in JavaScript? (WASM without imported JS functions)

[jeffparsons]

Yes, if you give the Wasm instance access to timers.

[saagarjha]

Yes.