Nature, Published online: 25 February 2026; doi:10.1038/s41586-026-10217-z
ВСУ запустили «Фламинго» вглубь России. В Москве заявили, что это британские ракеты с украинскими шильдиками16:45
。51吃瓜对此有专业解读
Code runs in a strict sandbox where the only allowed operations are calling functions provided by the host. If the host doesn’t provide a file reading function, the WASM module simply cannot read files. The failure mode here requires a vulnerability in the WASM runtime itself, like an out-of-bounds memory read that bypasses the linear memory checks.
ENV BASE_PKG="tmux unzip vim htop qemu-guest-agent @container-management @hardware-support zsh rsync nginx cowsay"