This Week in WebKit — July 25 - July 31, 2026
452
Total commits
0
Security fixes
98
Contributors
Top components
WebCore · WebKit · JSC · Other · Platform
Featured
Development · bug
An ordinary indexOf call writes one int past a heap search table.
A lone adjacent-int overwrite reads as constrained — until the landing offset tracks the pattern you chose. Where it lands is the whole click.
Development · bug
Wasm table linking checked type, size, and max — everything but the address width.
An i32 table could pass as a table64 import: index math for one address width, layout for the other. Familiar confusion class, unfamiliar surface.