There are more of these hiding in WebGPU. Some work on iOS as well. I reported them to Apple but they were closed as not having security relevance.

that's because they don't hav any security relevance.

Your definition of security doesn't include availability, then?

DOS is security relevant.

most bugs don't

DDoS-exploitable bugs generally do.